Lucene search
Veracode Vulnerability DatabaseVERACODE:29593HistoryMar 08, 2021 - 5:03 a.m.
Arbitrary Code Execution
2021-03-0805:03:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.03 Low
EPSS
Percentile
91.0%
xmlhttprequest is vulnerable to arbitrary code execution. The vulnerability exists through the lack of encoding of data in the this.send function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xmlhttprequest | le | 1.6.0 | |
| xmlhttprequest | le | 1.6.0 | |
| xmlhttprequest-ssl | le | 1.6.1 |
Related
github
github
xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection
2021-05-04 18:02:34
debiancve
debiancve
CVE-2020-28502
2021-03-05 18:15:12
githubexploit
githubexploit
Exploit for Code Injection in Xmlhttprequest Project Xmlhttprequest
2021-05-12 12:11:03
cvelist
cvelist
CVE-2020-28502 Arbitrary Code Injection
2021-03-05 00:00:00
nodejs
nodejs
Arbitrary Code Injection
2021-05-04 18:18:00
osv
osv
xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection
2021-05-04 18:02:34
CVE-2020-28502
2021-03-05 18:15:12
cve
cve
CVE-2020-28502
2021-03-05 18:15:12
nvd
nvd
CVE-2020-28502
2021-03-05 18:15:12
ubuntucve
ubuntucve
CVE-2020-28502
2021-03-05 00:00:00
ibm
ibm
prion
prion
Design/Logic Flaw
2021-03-05 18:15:00
redhatcve
redhatcve
CVE-2020-28502
2021-03-05 20:58:13