WS-2019-0206

dmn-js-properties-panel before 0.3.0 vulnerable to XSS attack when failing to sanitize input in specially configured diagrams...

Cross-Site Scripting in dmn-js-properties-panel

Versions of dmn-js-properties-panel prior to 0.8.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.3.0 or later...

GHSA-H9WR-XR4R-66FH Cross-Site Scripting in dmn-js-properties-panel

Versions of dmn-js-properties-panel prior to 0.8.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.3.0 or later...

PT-2020-21335

Name of the Vulnerable Software and Affected Versions dmn-js-properties-panel versions prior to 0.8.0 Description The issue arises from the failure to sanitize input in specially configured diagrams, potentially allowing attackers to inject arbitrary JavaScript into the embedding website. This ca...