Lucene search
+L

1 matches found

OSV
OSV
added 2020/09/03 6:16 p.m.23 views

GHSA-VPJ4-89Q8-RH38 Cross-Site Scripting in bpmn-js-properties-panel

Versions of bpmn-js-properties-panel prior to 0.31.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.31.0 or lat...

6.4AI score
SaveExploits0References1
Rows per page
Query Builder