CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 8:8 a.m.•10 views

CVE-2019-14772

verdaccio before 3.12.0 allows XSS...

6.1CVSS6.8AI score0.00865EPSS

Exploits1References1

NVD•added 2019/08/08 1:15 p.m.•17 views

CVE-2019-14772

verdaccio before 3.12.0 allows XSS...

6.1CVSS6.3AI score0.00865EPSS

Exploits1References1

OSV•added 2019/08/08 1:15 p.m.•13 views

CVE-2019-14772

verdaccio before 3.12.0 allows XSS...

6.1CVSS6.8AI score

Exploits0References1

CVE•added 2019/08/08 12:59 p.m.•59 views

CVE-2019-14772

Verdaccio (npm private registry) before version 3.12.0 is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of client-side data by the web application. The issue affects Verdaccio instances running 3.12.0 or migrating to major version >=4.0.0 to fix the vulnerability. No ...

6.1CVSS6.1AI score0.00865EPSS

Exploits1References1Affected Software1