oauth2orize-fprm XSS vulnerability

MEDIO 6.1CVE-2018-11647 · GHSA-p77r-c6m3-gj2r · Published 17/06/2018 · updated 17/06/2026

In breve

CVE-2018-11647 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda oauth2orize-fprm (oauth2orize-fprm project), oauth2orize-fprm.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.89%, superiore al 59.6% delle vulnerabilità.
Correzione: aggiornare a 0.2.1 o successiva.

Package	Affected versions	Patched versions
oauth2orize-fprm oauth2orize-fprm_project	`< 0.2.1`	`0.2.1`
oauth2orize-fprm npm	`< 0.2.1`	`0.2.1`

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.

NVD description

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.