Lucene search
Veracode Vulnerability DatabaseVERACODE:21463HistorySep 10, 2019 - 2:19 a.m.
Cross-Site Scripting (XSS)
2019-09-1002:19:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
33.8%
padrino-contrib is vulnerable to cross-site scripting (XSS). The caption parameter in the function set_home of breadcrumbs.rb is not escaped properly to prevent injection of malicious script through it, allowing an attacker to steal session tokens or perform unwanted actions on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| padrino-contrib | eq | 0.2.0 |
Related
osv
osv
Cross-site scripting in padrino-contrib
2019-09-23 18:33:07
CVE-2019-16145
2019-09-09 21:15:11
cvelist
cvelist
CVE-2019-16145
2019-09-09 20:46:41
prion
prion
Cross site scripting
2019-09-09 21:15:00
cve
cve
CVE-2019-16145
2019-09-09 21:15:11
nvd
nvd
CVE-2019-16145
2019-09-09 21:15:11
github
github
Cross-site scripting in padrino-contrib
2019-09-23 18:33:07