5 matches found
CVE-2019-14772
verdaccio before 3.12.0 allows XSS...
6.1CVSS6.8AI score0.00865EPSS
SaveExploits1References1
CVE-2019-14772
verdaccio before 3.12.0 allows XSS...
6.1CVSS6.3AI score0.00865EPSS
SaveExploits1References1
CVE-2019-14772
verdaccio before 3.12.0 allows XSS...
6.1CVSS6.8AI score
SaveExploits0References1
CVE-2019-14772
Verdaccio (npm private registry) before version 3.12.0 is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of client-side data by the web application. The issue affects Verdaccio instances running 3.12.0 or migrating to major version >=4.0.0 to fix the vulnerability. No ...
6.1CVSS6.1AI score0.00865EPSS
SaveExploits1References1Affected Software1
20