Lucene search
PRIOn knowledge basePRION:CVE-2019-15607HistoryJan 28, 2020 - 3:15 a.m.
Cross site scripting
2020-01-2803:15:00
PRIOn knowledge base
www.prio-n.com
3
A stored XSS vulnerability is present within node-red (version: <= 0.20.7) npm package, which is a visual tool for wiring the Internet of Things. This issue will allow the attacker to steal session cookies, deface web applications, etc.
References
Related
cve
cve
CVE-2019-15607
2020-01-28 03:15:10
osv
osv
Cross-Site Scripting in node-red
2020-01-30 21:00:21
CVE-2019-15607
2020-01-28 03:15:10
cvelist
cvelist
CVE-2019-15607
2020-01-28 02:13:16
nvd
nvd
CVE-2019-15607
2020-01-28 03:15:10
github
github
Cross-Site Scripting in node-red
2020-01-30 21:00:21
hackerone
hackerone
Node.js third-party modules: [node-red] Stored XSS within Flow's - "Name" field
2019-08-26 09:17:03
veracode
veracode
Cross-Site Scripting (XSS)
2020-01-13 04:55:57