Lucene search
Veracode Vulnerability DatabaseVERACODE:37261HistorySep 26, 2022 - 3:50 a.m.
Cross-site Scripting (XSS)
2022-09-2603:50:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
netlify/ipx
createipxhandler
index.ts
host validation
cache poisoning
javascript
0.001 Low
EPSS
Percentile
22.9%
@netlify/ipx is vulnerable to cross-site scripting.The vulnerability exists in createIPXHandler function in index.ts due to improper host validation, which allows an attacker to inject and execute malicious javascript via cache poisoning.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @netlify/ipx | le | 1.2.2 | |
| @netlify/ipx | le | 1.2.2 |
Related
nvd
nvd
CVE-2022-39239
2022-09-23 08:15:09
cve
cve
CVE-2022-39239
2022-09-23 08:15:09
prion
prion
Design/Logic Flaw
2022-09-23 08:15:00
github
github
osv
osv
@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation
2022-09-21 21:42:01
CVE-2022-39239
2022-09-23 08:15:09
