265 matches found
CVE-2021-23416
CVE-2021-23416 : Cross-site Scripting in curly-bracket-parser affects all versions when used as a template library due to improper sanitization of user input. The vulnerability enables injection of malicious scripts through template processing. Public advisories (GHSA/OSV) corroborate XSS across ...
CVE-2021-23416
This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...
CVE-2021-23416
This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...
CVE-2021-23416: Improper Neutralization of Input During Web Page Generation
This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input...
PT-2021-15505
Name of the Vulnerable Software and Affected Versions curly-bracket-parser affected versions not specified Description The issue arises when the curly-bracket-parser is used as a template library, as it fails to properly sanitize user input. Recommendations At the moment, there is no information...
rvm-windows (>=0.0.1, <=1.0.7), simpartic (>=0.1.4, <=0.8.8) +1 more potentially affected by CVE-2021-23416 via curly-bracket-parser (1.3.5)
curly-bracket-parser NPM version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on curly-bracket-parser and may be impacted: - rvm-windows =0.0.1, =0.1.4, =0.3.0, =0.9.54 Source cves: CVE-2021-23416 Source advisory: SNYK:JS-CURLYBRACKETPARSER-12971...
Cross-site Scripting (XSS)
Overview curly-bracket-parser is a Simple parser to replace variables inside templates/strings and files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. When used as a template library, it does not properly sanitize the user input. PoC const express = require'expres...
Unable to type the left bracket "[" in published desktop via Workspace app for HTML5
Users cannot type left square bracket "" in published desktop Accessing published desktop via Workspace app for HTML5 through Mozilla Firefox...
CVE-2013-6430: Improper Neutralization of Input During Web Page Generation
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...
@27works/posto (2.0.2), jstransformer-bracket-template (0.0.1) +1 more potentially affected by unknown CVE via bracket-template (1.1.5)
bracket-template NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bracket-template and may be impacted: - @27works/posto 2.0.2 - jstransformer-bracket-template 0.0.1 - roo-bid =0.0.5, =0.0.7 Source cves: unknown CVE Source advisory:...
@27works/posto (2.0.2), jstransformer-bracket-template (0.0.1) +1 more potentially affected by unknown CVE via bracket-template (1.1.5)
bracket-template NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bracket-template and may be impacted: - @27works/posto 2.0.2 - jstransformer-bracket-template 0.0.1 - roo-bid =0.0.5, =0.0.7 Source cves: unknown CVE Source advisory:...
GHSA-JJ6G-7J8P-7GF2 Cross-Site Scripting in bracket-template
All versions of bracket-template are vulnerable to stored cross-site scripting XSS. This is exploitable when a variable passed in via a GET parameter is used in a template. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this...
Cross-Site Scripting in bracket-template
All versions of bracket-template are vulnerable to stored cross-site scripting XSS. This is exploitable when a variable passed in via a GET parameter is used in a template. Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this...
PT-2019-20054
Name of the Vulnerable Software and Affected Versions bracket-template versions affected versions not specified Description The issue concerns stored cross-site scripting XSS, which can be exploited when a variable passed via a GET parameter is used in a template. Recommendations At the moment,...
pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)
The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression...
@27works/posto (2.0.2), jstransformer-bracket-template (0.0.1) +1 more potentially affected by CVE-2018-3735 via bracket-template (1.1.5)
bracket-template NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bracket-template and may be impacted: - @27works/posto 2.0.2 - jstransformer-bracket-template 0.0.1 - roo-bid =0.0.5, =0.0.7 Source cves: CVE-2018-3735 Source advisory:...
@27works/posto (2.0.2), jstransformer-bracket-template (0.0.1) +1 more potentially affected by CVE-2018-3735 via bracket-template (1.1.5)
bracket-template NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bracket-template and may be impacted: - @27works/posto 2.0.2 - jstransformer-bracket-template 0.0.1 - roo-bid =0.0.5, =0.0.7 Source cves: CVE-2018-3735 Source advisory:...
GHSA-488M-6GH8-9J36 bracket-template vulnerable to reflected XSS
bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template...
Bracket-template Cross-Site Scripting Vulnerability
bracket-template is a JavaScript template library for modern browsers. A cross-site scripting vulnerability exists in bracket-template. This vulnerability can be exploited by a remote attacker to inject malicious code via GET parameters...