PT-2019-14207
CVE-2019-15478
·
تاريخ النشر
2019-08-26
·
تاريخ التحديث
2019-09-23
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Status Board version 1.1.81
status-board versions all
Description
The issue is related to Cross-Site Scripting. The
renderJsDashboard() function is vulnerable due to insufficient sanitization of the safeDashboard variable. If this variable is controlled by user input, it may allow attackers to execute arbitrary JavaScript in a victim's browser.Recommendations
For Status Board version 1.1.81, consider disabling the
renderJsDashboard() function until a patch is available.
For status-board all versions, consider using an alternative package until a fix is made available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾