EUVD-2019-0657

Malware in sbrugna...

EUVD-2019-0659

Malware in sbrugna...

CVE-2019-15478

Status Board 1.1.81 has reflected XSS via logic.ts...

CVE-2019-15479

Status Board 1.1.81 has reflected XSS via dashboard.ts...

status-board-cli (>=1.1.0 <=2.0.51) potentially affected by CVE-2019-15478 via status-board (>=1.1.12 <=1.1.80)

status-board NPM version =1.1.12, =1.1.0, =2.0.51 Source cves: CVE-2019-15478 Source advisory: OSV:GHSA-6M4R-CGM3-6Q7Q...

GHSA-6M4R-CGM3-6Q7Q Cross-Site Scripting in status-board

All versions of status-board are vulnerable to Cross-Site Scripting. The renderJsDashboard function concatenates the safeDashboard variable to the HTTP response message with insufficient sanitization. If this variable is controlled by user input it may allow attackers to execute arbitrary...

Cross-Site Scripting in status-board

All versions of status-board are vulnerable to Cross-Site Scripting. The renderJsDashboard function concatenates the safeDashboard variable to the HTTP response message with insufficient sanitization. If this variable is controlled by user input it may allow attackers to execute arbitrary...

status-board-cli (>=1.1.0 <=2.0.51) potentially affected by CVE-2019-15479 via status-board (>=1.1.12 <=1.1.80)

status-board NPM version =1.1.12, =1.1.0, =2.0.51 Source cves: CVE-2019-15479 Source advisory: OSV:GHSA-8864-RHMW-5M6F...

Status Board vulnerable to Cross-Site Scripting before v1.1.82

Versions of status-board prior to 1.1.82 are vulnerable to Cross-Site Scripting. The renderDashboard function concatenates the safeDashboard variable to the printed error message with insufficient sanitization. If this variable is controlled by user input it allows attackers to execute arbitrary...

GHSA-8864-RHMW-5M6F Status Board vulnerable to Cross-Site Scripting before v1.1.82

Versions of status-board prior to 1.1.82 are vulnerable to Cross-Site Scripting. The renderDashboard function concatenates the safeDashboard variable to the printed error message with insufficient sanitization. If this variable is controlled by user input it allows attackers to execute arbitrary...

Cross-Site Scripting

Overview Versions of status-board prior to 10.0.1 are vulnerable to Cross-Site Scripting. The createPreviewButton function fails to sanitize the href attribute of a created tag. This may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 10.0....

Cross-Site Scripting

Overview All versions of status-board are vulnerable to Cross-Site Scripting. The renderJsDashboard function concatenates the safeDashboard variable to the HTTP response message with insufficient sanitization. If this variable is controlled by user input it may allow attackers to execute arbitrar...

Cross-Site Scripting

Overview All versions of status-board are vulnerable to Cross-Site Scripting. The renderDashboard function concatenates the safeDashboard variable to the printed error message with insufficient sanitization. If this variable is controlled by user input it allows attackers to execute arbitrary...

Status Board Cross-Site Scripting Vulnerability

Status Board is a Nodejs-based dashboard framework. A cross-site scripting vulnerability exists in Status Board version 1.1.81, which can be exploited by an attacker to execute client-side code...

Cross-Site Scripting (XSS)

status-board is vulnerable to cross-site scripting XSS. The displayed error message is not sanitized and would allow remote attackers to inject arbitrary Javascript into a victim's browser through the safeDashboardName parameter...

Status Board Cross-Site Scripting Vulnerability

Status Board is a dashboard framework written in nodejs. A cross-site scripting vulnerability exists in Status Board 1.1.81. An attacker can exploit this vulnerability via dashboard.ts to conduct cross-site scripting attacks...

CVE-2019-15479

Status Board 1.1.81 has reflected XSS via dashboard.ts...

CVE-2019-15479

Status Board 1.1.81 has reflected XSS via dashboard.ts...

Cross site scripting

Status Board 1.1.81 has reflected XSS via dashboard.ts...

CVE-2019-15479

CVE-2019-15479 concerns Status Board 1.1.81 exhibiting a Cross‑Site Scripting (XSS) in the dashboard.ts path. The root cause is insufficient sanitization when concatenating user-controlled input into the error/dashboard rendering flow, enabling arbitrary JavaScript execution in a victim’s browser...