qiita-markdown Cross-site Scripting vulnerability

MEDIO 6.1CVE-2021-28833 · GHSA-9p29-94hp-8rvc · Published 21/06/2021 · updated 17/06/2026

In breve

CVE-2021-28833 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda qiita-markdown, qiita (increments).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.7% delle vulnerabilità.
Correzione: aggiornare a 0.34.0 o successiva.

Package	Affected versions	Patched versions
qiita-markdown RubyGems	`< 0.34.0`	`0.34.0`
qiita increments	`< 0.34.0`	`0.34.0`

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

NVD description

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.