CVE-2021-43635

MEDIO 6.1CVE-2021-43635 · Published 04/02/2022 · updated 17/06/2026

In breve

CVE-2021-43635 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda codex (codexnotes).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 78.3% delle vulnerabilità.
Correzione: aggiornare a 1.4.0 o successiva.

Package	Affected versions	Patched versions
codex codexnotes	`< 1.4.0`	`1.4.0`

Description

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.

References

jcv8000/Codex · Product
jcv8000/Codex · Exploit
jcv8000/Codex release v1.4.1 · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free