33 matches found
PT-2021-22007
Name of the Vulnerable Software and Affected Versions: jsoneditor affected versions not specified Description: The issue concerns Inefficient Regular Expression Complexity, specifically a ReDoS regular expression denial of service vulnerability. This allows an attacker to cause an application to...
Inefficient Regular Expression Complexity in josdejong/jsoneditor
✍️ Description The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
Cross site scripting
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
0.8.18-p11 (0.8.18-p12), @abtasty-innovation/module-wrapper (>=0.1.0, <=0.2.31) +219 more potentially affected by CVE-2020-23849 via jsoneditor (>=3.2.0, <=8.6.8)
jsoneditor NPM version =3.2.0, =0.1.0, =0.0.2, =0.1.0-snapshot.1, =2.6.4, =0.0.4, =0.0.27, =0.0.1, =0.0.1, =0.5.0-before.9, =0.1.1, =0.0.1, =0.0.46, =0.0.57 and more Source cves: CVE-2020-23849 Source advisory: MEND:CVE-2020-23849...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
CVE-2020-23849
CVE-2020-23849 refers to a Stored XSS in the jsoneditor component (tree mode) present before version 9.0.2. The underlying issue is injecting and executing JavaScript within the affected editor, enabling script execution that can compromise the user session or page state. Public references descri...
jsoneditor Cross-site Scripting Vulnerability
Josdejong Jsoneditor is a web page based software for viewing, editing, and verifying Json data by the individual developer Josdejong. A cross-site scripting vulnerability exists in jsoneditor before 9.0.2, which allows the vulnerability to be triggered by injecting and executing JavaScript...
CVE-2020-23849: Improper Neutralization of Input During Web Page Generation
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
PT-2021-10951
Name of the Vulnerable Software and Affected Versions: jsoneditor versions prior to 9.0.2 Description: A stored XSS issue was found in the tree mode of jsoneditor, allowing attackers to inject and execute JavaScript. Recommendations: For versions prior to 9.0.2, update to version 9.0.2 or later t...
