Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29841
HistoryMar 27, 2021 - 10:52 p.m.

Cross-site Scripting (XSS)

2021-03-2722:52:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

40.4%

Synapse is vulnerable to cross-site scripting (XSS) attacks. An attacker is able to inject and execute malicious script as the library does not escape loading of HTML files from the default Synapse template directory, allowing access to cookies and other browser data and access to other resources served on the same domain or parent domains.