Lucene search
Veracode Vulnerability DatabaseVERACODE:7682HistoryNov 05, 2018 - 1:42 a.m.
Cross-site Scripting (XSS)
2018-11-0501:42:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
42.6%
tianma-static is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists as it does not sanitize filenames, allowing filenames to be used as a vector for XSS attacks.
References
Related
cvelist
cvelist
CVE-2018-16474
2018-11-06 19:00:00
nodejs
nodejs
Stored Cross-Site Scripting
2018-11-29 02:39:41
nvd
nvd
CVE-2018-16474
2018-11-06 19:29:00
hackerone
hackerone
Node.js third-party modules: [tianma-static] Stored xss on filename
2018-09-01 02:29:04
Node.js third-party modules: [tianma-static] Security issue with XSS.
2019-06-11 16:08:58
osv
osv
Stored Cross-Site Scripting in tianma-static
2018-11-06 23:12:01
github
github
Stored Cross-Site Scripting in tianma-static
2018-11-06 23:12:01
prion
prion
Cross site scripting
2018-11-06 19:29:00
cve
cve
CVE-2018-16474
2018-11-06 19:29:00