11 matches found
WS-2019-0189
All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row...
sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)
md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: MEND:WS-2019-0189...
WS-2019-0155
md-data-table all versions are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row...
sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)
md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: MEND:WS-2019-0155...
Cross-site Scripting (XSS)
md-data-table is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of the value of mdt-row...
sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)
md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-HGR5-82RC-P936...
Cross-Site Scripting in md-data-table
All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package to perfo...
GHSA-HGR5-82RC-P936 Cross-Site Scripting in md-data-table
All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package to perfo...
sign_project (1.0.0) potentially affected by unknown CVE via md-data-table (2.2.0)
md-data-table NPM version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on md-data-table and may be impacted: - signproject 1.0.0 Source cves: unknown CVE Source advisory: GHSA-HGR5-82RC-P936...
PT-2020-21341
Name of the Vulnerable Software and Affected Versions md-data-table versions affected versions not specified Description The issue concerns cross-site scripting XSS, which can be exploited if an attacker controls data rendered by mdt-row. Recommendations As a temporary workaround, consider proper...
Cross-Site Scripting
Overview All versions of md-data-table are vulnerable to cross-site scripting XSS. This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row Recommendation As there is no fix for this vulnerability at this time we recommend either selecting another package...