BUI-select-xss

BUI-select-xss cve-2018-8108 During a security test, this issue was discovered by chance. BUI is a front-end framework used by many enterprises to build their own front-end applications. Typically, we prevent XSS by treating all user input as untrusted, escaping it during output, and then passing...

CVE-2018-8108

CVE-2018-8108 affects the bui library’s select component. The issue is an XSS vulnerability caused by escaping text that has already been escaped, demonstrated by workGroupList text. Affected: bui’s select component (front-end), with roots in the escape operation being applied redundantly. Impact...