Lucene search

Cross-site Scripting (XSS)

🗓️ 05 Nov 2018 01:38:42Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

tianma-static vulnerable to XSS attacks due to unsanitized filename

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Cvelist	CVE-2018-16474	6 Nov 201819:00	–	cvelist
Node.js	Stored Cross-Site Scripting	29 Nov 201802:39	–	nodejs
NVD	CVE-2018-16474	6 Nov 201819:29	–	nvd
Hacker One	Node.js third-party modules: [tianma-static] Security issue with XSS.	11 Jun 201916:08	–	hackerone
Hacker One	Node.js third-party modules: [tianma-static] Stored xss on filename	1 Sep 201802:29	–	hackerone
Prion	Cross site scripting	6 Nov 201819:29	–	prion
CVE	CVE-2018-16474	6 Nov 201819:29	–	cve
OSV	GHSA-JHGP-HVJ6-X2P2 Stored Cross-Site Scripting in tianma-static	6 Nov 201823:12	–	osv
Github Security Blog	Stored Cross-Site Scripting in tianma-static	6 Nov 201823:12	–	github

Vulners

Node

tianma-static_project tianma-staticRange1.0.0-b0–1.0.4js

Source	Link
hackerone	www.hackerone.com/reports/403692

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Nov 2018 01:42Current

5.5Medium risk

Vulners AI Score5.5

CVSS24.3

CVSS36.1

EPSS0.00224