Lucene search
Veracode Vulnerability DatabaseVERACODE:22025HistoryNov 27, 2019 - 8:45 a.m.
Cross-site Scripting (XSS)
2019-11-2708:45:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
33.8%
iobroker.web is vulnerable to cross-site scripting (XSS). The attack is possible because it does not sanitize the characters in the URL path, allowing an attacker to inject arbitrary script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iobroker.web | le | 2.4.9 |
Related
nodejs
nodejs
Cross-Site Scripting
2019-11-27 15:14:50
osv
osv
Cross-Site Scripting in iobroker.web
2019-12-02 18:14:30
prion
prion
Design/Logic Flaw
2019-11-25 23:15:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Iobroker Iobroker.Web
2020-12-01 09:18:57
cve
cve
CVE-2019-10771
2019-11-25 23:15:10
github
github
Cross-Site Scripting in iobroker.web
2019-12-02 18:14:30
nvd
nvd
CVE-2019-10771
2019-11-25 23:15:10
cvelist
cvelist
CVE-2019-10771
2019-11-25 22:39:39