Lucene search
Veracode Vulnerability DatabaseVERACODE:5320HistoryOct 25, 2017 - 1:55 a.m.
Cross-site Scripting (XSS)
2017-10-2501:55:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
71.8%
keystone is vulnerable to cross-site scripting (XSS) attacks. These attacks are possible through the fields/types/markdown/MarkdownType.js file because the markdown is not sanitized. This allows attackers to inject and execute arbitrary webscript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| keystone | le | 4.0.0-beta.5 |
Related
osv
osv
Cross-Site Scripting in keystone
2017-11-15 19:44:16
CVE-2017-15878
2017-10-24 21:29:00
CVE-2017-15881
2017-10-24 22:29:00
cve
cve
CVE-2017-15878
2017-10-24 21:29:00
CVE-2017-15881
2017-10-24 22:29:00
zdt
zdt
exploitpack
exploitpack
KeystoneJS 4.0.0-beta.5 - Cross-Site Scripting
2017-10-25 00:00:00
nvd
nvd
CVE-2017-15878
2017-10-24 21:29:00
CVE-2017-15881
2017-10-24 22:29:00
cvelist
cvelist
CVE-2017-15878
2017-10-24 21:00:00
CVE-2017-15881
2017-10-24 22:00:00
packetstorm
packetstorm
KeystoneJS 4.0.0-beta.5 Unauthenticated Stored Cross Site Scripting
2017-10-25 00:00:00
prion
prion
Cross site scripting
2017-10-24 21:29:00
Cross site scripting
2017-10-24 22:29:00
github
github
Cross-Site Scripting in keystone
2017-11-15 19:44:16
exploitdb
exploitdb
KeystoneJS 4.0.0-beta.5 - Cross-Site Scripting
2017-10-25 00:00:00