CVE-2020-28502

CVE-2020-28502 node-XMLHttpRequest RCE NVD Description This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously async=False on xhr.open, malicious user input flowing into xhr.send could result in arbitrary code bein...

node-XMLHttpRequest Certificate Validation DoS

The vulnerability of the node-XMLHttpRequest library for web requests is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Dan DeFelippi node-XMLHttpRequest code injection vulnerability

Dan DeFelippi node-XMLHttpRequest is Dan DeFelippi an open source application . Used to simulate the browser XMLHttpRequest object . A code injection vulnerability exists in node-XMLHttpRequest before 1.7.0, which can be exploited by an attacker to cause arbitrary code to be injected and run...