En resumen
- CVE-2018-20583 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a league/commonmark, commonmark (thephpleague).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.3% de las vulnerabilidades.
- Solución: actualizar a 0.18.1 o posterior.
Description
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing javascript as javascri%0apt).
NVD description
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing javascript as javascri%0apt).
Más vulnerabilidades de league/commonmark
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free