Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/10/25 8:22 p.m.59 views

@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

Description Due to the common practice of providing vulnerability details in markdown format, the Dependency-Track frontend renders them using the JavaScript library Showdown. Showdown does not have any XSS countermeasures built in, and versions before 4.6.1 of the Dependency-Track frontend did n...

5.4CVSS5.3AI score0.00665EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder