Lucene search
Veracode Vulnerability DatabaseVERACODE:32890HistoryNov 10, 2021 - 5:10 a.m.
Cross-site Scripting (XSS)
2021-11-1005:10:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
30.7%
graphql-playground-react is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in onHasCompletion.js allowing an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| graphql-playground-react | le | 1.7.27 | |
| graphql-playground | le | 1.3.17 | |
| graphql-playground-react | le | 1.7.27 | |
| graphql-playground | le | 1.3.17 |
Related
nvd
nvd
CVE-2021-41249
2021-11-04 20:15:08
prion
prion
Code injection
2021-11-04 20:15:00
cve
cve
CVE-2021-41249
2021-11-04 20:15:08
github
github
XSS vulnerability in GraphQL Playground from untrusted schemas
2021-11-08 18:06:09
cvelist
cvelist
CVE-2021-41249 XSS vulnerability in GraphQL Playground
2021-11-04 20:05:12
osv
osv
CVE-2021-41249
2021-11-04 20:15:08
CVE-2021-41248
2021-11-04 21:15:08
GraphiQL introspection schema template injection attack
2021-11-08 18:03:50