Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2022/01/27 4:00 p.m.•48 views

Cross site scripting in three.js

CVE has been withdrawn Versions of three.js prior to 0.137.0 load untrusted iframes and allow for attackers to inject arbitrary javascript into a users browser...

4.2AI score
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2022/01/27 4:00 p.m.•26 views

GHSA-7VVQ-7R29-5VG3 Cross site scripting in three.js

CVE has been withdrawn Versions of three.js prior to 0.137.0 load untrusted iframes and allow for attackers to inject arbitrary javascript into a users browser...

7.1CVSS6.9AI score
SaveExploits0References5
Rows per page
Query Builder