Lucene search
+L

2 matches found

OSV
OSV
added 2022/01/27 4:0 p.m.18 views

GHSA-7VVQ-7R29-5VG3 Cross site scripting in three.js

CVE has been withdrawn Versions of three.js prior to 0.137.0 load untrusted iframes and allow for attackers to inject arbitrary javascript into a users browser...

7.1CVSS6.9AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/01/27 4:0 p.m.32 views

Cross site scripting in three.js

CVE has been withdrawn Versions of three.js prior to 0.137.0 load untrusted iframes and allow for attackers to inject arbitrary javascript into a users browser...

4.2AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder