Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2021/03/01 7:44 p.m.•65 views

Docsify XSS Vulnerability

This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...

8.6CVSS6.4AI score0.01657EPSS
SaveExploits2References8Affected Software1
Mend
Mend
•added 2021/02/19 4:35 p.m.•9 views

CVE-2021-23342

This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1 When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking plac...

8.8CVSS0.01657EPSS
SaveExploits2References5
Rows per page
Query Builder