Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2023/08/16 6:30 a.m.•27 views

Duplicate Advisory: @excalidraw/excalidraw Cross-site Scripting vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v7v8-gjv7-ffmr. This link is maintained to preserve external references. Original Description Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded lin...

6.1CVSS6.1AI score0.00561EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/16 5:00 a.m.•11 views

CVE-2023-26140

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

6.1CVSS6.1AI score0.00561EPSS
SaveExploits0References3
Mend
Mend
•added 2023/08/16 5:00 a.m.•2 views

CVE-2023-26140

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

6.1CVSS0.00561EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/16 12:00 a.m.•3 views

CVE-2023-26140: Improper Neutralization of Input During Web Page Generation

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

6.1CVSS6.3AI score0.00561EPSS
SaveExploits0References3
Rows per page
Query Builder