CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2017/06/07 9:29 p.m.•3 views

DEBIAN-CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

5.3CVSS7AI score0.01287EPSS

Exploits0References1

Debian CVE•added 2017/06/07 9:0 p.m.•18 views

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs...

5.3CVSS5.6AI score0.01287EPSS

Exploits0

CVE•added 2017/06/07 9:0 p.m.•54 views

CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs, enabling potential HTML injection when rendering user-provided content. Affected: markdown-it versions prior to 4.1.0. Root cause: failure to block data: URLs in the rendering process. Impact: authoring or rendering content could lead to uninten...

5.3CVSS5.5AI score0.01287EPSS

Exploits0References3Affected Software1