Lucene search
PRIOn knowledge basePRION:CVE-2019-10756HistoryOct 08, 2019 - 7:15 p.m.
Design/Logic Flaw
2019-10-0819:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
25.0%
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-red-dashboard | lt | 2.17.0 |
Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-09 03:36:30
osv
osv
CVE-2019-10756
2019-10-08 19:15:09
Cross-site Scripting in node-red-dashboard
2019-10-25 19:41:24
github
github
Cross-site Scripting in node-red-dashboard
2019-10-25 19:41:24
cve
cve
CVE-2019-10756
2019-10-08 19:15:09
cvelist
cvelist
CVE-2019-10756
2019-10-08 18:58:18
nvd
nvd
CVE-2019-10756
2019-10-08 19:15:09