Lucene search
+L

3 matches found

OSV
OSV
added 2019/06/13 7:09 p.m.7 views

GHSA-49R3-3H96-RWJ6 Cross-Site Scripting in ids-enterprise

Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. The soho-dropdown component does not properly encode its output and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later...

6.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/06/13 7:09 p.m.19 views

Cross-Site Scripting in ids-enterprise

Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. The soho-dropdown component does not properly encode its output and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later...

4.8AI score
SaveExploits0References4Affected Software1
nodejs
nodejs
added 2019/06/10 8:46 p.m.24 views

Cross-Site Scripting

Overview Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. The soho-dropdown component does not properly encode its output and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later References - GitHub Issue -...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder