Lucene search
Veracode Vulnerability DatabaseVERACODE:22237HistoryDec 30, 2019 - 4:11 a.m.
Cross-Site Scripting (XSS)
2019-12-3004:11:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
37.3%
fileview is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a user’s browser via the filename parameter as there was no validation and sanitization on filenames.
Related
prion
prion
Cross site scripting
2020-01-06 17:15:00
hackerone
hackerone
Node.js third-party modules: [fileview] Inadequate Output Encoding and Escaping
2019-03-09 15:12:41
osv
osv
Cross-Site Scripting in fileview
2020-04-01 16:36:15
cve
cve
CVE-2019-15602
2020-01-06 17:15:13
cvelist
cvelist
CVE-2019-15602
2020-01-06 16:32:41
nvd
nvd
CVE-2019-15602
2020-01-06 17:15:13
github
github
Cross-Site Scripting in fileview
2020-04-01 16:36:15