En resumen
- CVE-2019-10756 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a node-red-dashboard (nodered), node-red-dashboard.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.57%, mayor que el 47.2% de las vulnerabilidades.
- Solución: actualizar a 2.17.0 o posterior.
Description
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
NVD description
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
Más vulnerabilidades de node-red-dashboard
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free