Lucene search
K

7 matches found

OSV
OSV
added 2020/09/01 4:4 p.m.17 views

GHSA-5H5R-23R4-M87H Cross-Site Scripting in gitbook

Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader. Recommendation Update to version 3.2.2 or later...

6.1CVSS6AI score0.0024EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2020/09/01 4:4 p.m.17 views

Cross-Site Scripting in gitbook

Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader. Recommendation Update to version 3.2.2 or later...

6.1CVSS2.6AI score0.0024EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2018/06/15 12:0 a.m.0 views

GitBook online reader cross-site scripting vulnerability

GitBook is a command-line tool for publishing and hosting books online. online reader is one of the online reading modules. A cross-site scripting vulnerability exists in the online reader in GitBook versions prior to 3.2.2, which stems from the program failing to properly filter user input. A...

6.1CVSS6.1AI score0.0024EPSS
Exploits1References1
NVD
NVD
added 2018/06/04 7:29 p.m.6 views

CVE-2017-16019

GitBook is a command line tool and Node.js library for building beautiful books using GitHub/Git and Markdown or AsciiDoc. Stored Cross-Site-Scripting XSS is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader...

6.1CVSS6.3AI score0.0024EPSS
Exploits1References2
OSV
OSV
added 2018/06/04 7:29 p.m.8 views

CVE-2017-16019

GitBook is a command line tool and Node.js library for building beautiful books using GitHub/Git and Markdown or AsciiDoc. Stored Cross-Site-Scripting XSS is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader...

6.1CVSS6.5AI score
Exploits0References2
Prion
Prion
added 2018/06/04 7:29 p.m.11 views

Cross site scripting

GitBook is a command line tool and Node.js library for building beautiful books using GitHub/Git and Markdown or AsciiDoc. Stored Cross-Site-Scripting XSS is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader...

4.3CVSS6.2AI score0.0024EPSS
Exploits1References2Affected Software1
Node.js
Node.js
added 2016/11/28 4:6 p.m.34 views

Cross-Site Scripting

Overview Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader. Recommendation Update to version 3.2.2 or later. References - Issue 1609 - GitHub Advisory...

4.3CVSS3.2AI score0.0024EPSS
Exploits1Affected Software1
Rows per page
Query Builder