Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-10548
HistoryMay 31, 2018 - 8:29 p.m.

Code injection

2018-05-3120:29:00
PRIOn knowledge base
www.prio-n.com
2

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function.

CPENameOperatorVersion
reduce-css-calcle1.2.4

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

Related for PRION:CVE-2016-10548