react16-ssr

CVE-2018-6341 https://vulners.com/cve/CVE-2018-6341 Простой PoC для воспроизведения XSS-уязвимости Шаги npm i npm run start Перейдите на localhost:3006...

CVE-2018-6341

CVE-2018-6341 (React/XSS) : The IBM bulletin confirms a vulnerability in React where rendering HTML via ReactDOMServer fails to escape user-supplied attribute names, enabling cross-site scripting. Affected versions are React 16.0.x through 16.4.x; the issue arises from improper validation/escapin...