CVE-2020-26297

CVE-2020-26297 affects mdBook, a Rust-based tool for building online books. The vulnerability is a cross-site scripting flaw in the search feature (introduced in 0.1.4) that could allow an attacker to execute arbitrary JavaScript in a user’s browser via a malicious search query or a crafted link....

CVE-2020-26297

mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which could allow an attacker to execute arbitrary JavaScript code on the page. The search feature of mdBo...

mdbook-cat-prep (>=1.0.0, <=1.0.8), mdbook-curly-quotes (0.3.0) +24 more potentially affected by CVE-2020-26297 via mdbook (>=0.2.3, <=0.3.7)

mdbook CARGO version =0.2.3, =1.0.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-26297 Source advisory: OSV:RUSTSEC-2021-0001...

RUSTSEC-2021-0001 XSS in mdBook's search page

This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...

XSS in mdBook's search page

This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...

CVE-2020-26297: Improper Neutralization of Input During Web Page Generation

mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affecting the search feature of mdBook, which could allow an attacker to execute arbitrary JavaScript code on the page. The search feature of mdBo...

PT-2021-11237

Name of the Vulnerable Software and Affected Versions: mdBook versions prior to 0.4.5 Description: The search feature of mdBook is affected by a cross-site scripting vulnerability, which could allow an attacker to execute arbitrary JavaScript code on a user's browser. This can be achieved by...