Lucene search
Veracode Vulnerability DatabaseVERACODE:22284HistoryJan 13, 2020 - 4:55 a.m.
Cross-Site Scripting (XSS)
2020-01-1304:55:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
25.0%
node-red is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a user’s browser via the name field when renaming a flow in the Workspace dialog.
Related
hackerone
hackerone
Node.js third-party modules: [node-red] Stored XSS within Flow's - "Name" field
2019-08-26 09:17:03
cve
cve
CVE-2019-15607
2020-01-28 03:15:10
osv
osv
Cross-Site Scripting in node-red
2020-01-30 21:00:21
CVE-2019-15607
2020-01-28 03:15:10
cvelist
cvelist
CVE-2019-15607
2020-01-28 02:13:16
nvd
nvd
CVE-2019-15607
2020-01-28 03:15:10
prion
prion
Cross site scripting
2020-01-28 03:15:00
github
github
Cross-Site Scripting in node-red
2020-01-30 21:00:21