Lucene search
Veracode Vulnerability DatabaseVERACODE:7546HistoryOct 01, 2018 - 8:08 a.m.
Cross-site Scripting (XSS)
2018-10-0108:08:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
19.5%
yapi-cli is vulnerable to a cross-site scripting (XSS) attack. The library does not sanitize or validate the projectName variable, allowing a malicious user to inject and execute arbitrary Javascript.
Related
osv
osv
Cross-site Scripting in yapi-vendor
2018-11-21 22:19:59
CVE-2018-17574
2018-09-28 09:29:00
cvelist
cvelist
CVE-2018-17574
2018-09-28 09:00:00
github
github
Cross-site Scripting in yapi-vendor
2018-11-21 22:19:59
cve
cve
CVE-2018-17574
2018-09-28 09:29:00
prion
prion
Cross site scripting
2018-09-28 09:29:00
nvd
nvd
CVE-2018-17574
2018-09-28 09:29:00