CVE-2024-25676

An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading...

CVE-2024-25676

An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading...

ViewerJS 安全漏洞

Viewer.js is a JavaScript image viewer by the individual developer Fengyuan Chen. A security vulnerability exists in ViewerJS version 0.5.8, which stems from a failure to properly clean up content loaded via URL tags and can lead to open redirects...

CVE-2024-25676

An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading...

CVE-2024-25676

An issue was discovered in ViewerJS 0.5.8. A script from the component loads content via URL TAGs without properly sanitizing it. This leads to both open redirection and out-of-band resource loading...

CVE-2024-25676

CVE-2024-25676 affects ViewerJS 0.5.8. A component script loads content via URL TAGs without proper sanitization, enabling open redirection and out-of-band resource loading. The root cause is unsanitized URL handling in the script. Documented impacts include redirection and resource loading expos...

PT-2024-21084 · Viewerjs · Viewerjs

Name of the Vulnerable Software and Affected Versions: ViewerJS version 0.5.8 Description: An issue was discovered in ViewerJS where a script from the component loads content via URL TAGs without properly sanitizing it, leading to both open redirection and out-of-band resource loading...

Cross-Site Scripting (XSS)

viewerjs is vulnerable to cross-site scripting XSS attacks. This is due to a lack of escaping on user input HTML entities such as alt, src and url. An attacker could use this flaw to inject and execute arbitrary Javascript in a user's browser...