Cross-site Scripting(XSS)

🗓️ 29 Jul 2021 04:39:10Reported by Veracode Vulnerability DatabaseType

videojs vulnerable to cross-site scripting via track ta

Reporter	Title	Published	Views	Family All 54
ATTACKERKB	CVE-2021-23414	28 Jul 202107:19	–	attackerkb
Circl	CVE-2021-23414	28 Jul 202112:13	–	circl
CNNVD	video.js 跨站脚本漏洞	28 Jul 202100:00	–	cnnvd
CVE	CVE-2021-23414	28 Jul 202107:20	–	cve
Cvelist	CVE-2021-23414 Cross-site Scripting (XSS)	28 Jul 202107:20	–	cvelist
EUVD	EUVD-2021-1823	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.11-1.fc36	7 Dec 202201:43	–	fedora
Fedora	[SECURITY] Fedora 37 Update: moodle-4.1-1.fc37	7 Dec 202201:37	–	fedora
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.11-1.fc35	7 Dec 202201:43	–	fedora
Tenable Nessus	Fedora 37 : moodle (2022-74a9c8e95f)	15 Nov 202400:00	–	nessus

Vulners

Node

video.js videojs/video.jsRangev5.0.0-rc.1–5.0.0-rc.1js

video.js_project video.jsRange5.0.0-rc.1–7.14.2js

video.js_project video.jsRange5.0.0-rc.24–7.7.1js

Source	Link
github	www.github.com/videojs/video.js/commit/b3acf663641fca0f7a966525a72845af7ec5fab2
github	www.github.com/videojs/video.js/pull/7334
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2DHYIIAUXUBHMBEDYU7TYNZXEN2W2SA2/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLRJB5JNKK3VVBLV3NH3RI7COEDAXSAB/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74SXNGA5RIWM7QNX7H3G7SYIQLP4UUGV/

07 Nov 2023 22:48Current

3.3Low risk

Vulners AI Score3.3

CVSS 3.16.1 - 6.5

CVSS 24.3

EPSS0.0045