Lucene search
Veracode Vulnerability DatabaseVERACODE:7819HistoryNov 16, 2018 - 6:02 a.m.
Code Injection
2018-11-1606:02:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.001
Percentile
37.2%
valine is vulnerable to code injection. The vulnerability is possible because the EMBED tags are not validated to enforce same-origin policy, allowing the attacker to inject HTML combined with a .pdf file.
References
Related
github
github
Valine HTML Injection
2018-11-21 22:19:41
osv
osv
Valine HTML Injection
2018-11-21 22:19:41
CVE-2018-19289
2018-11-15 06:29:00
cve
cve
CVE-2018-19289
2018-11-15 06:29:00
cvelist
cvelist
CVE-2018-19289
2018-11-15 06:00:00
nvd
nvd
CVE-2018-19289
2018-11-15 06:29:00
prion
prion
Design/Logic Flaw
2018-11-15 06:29:00