Cross-Site Scripting in public

概要

参考情報

• hackerone.com/reports/316346 · WEB
• npmjs.com/advisories/609 · WEB

public のその他の脆弱性

• GHSA-4vvp-x9h2-x2vf中Path Traversal in public
• CVE-2018-16480中 6.1A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of san…
• CVE-2018-3747中 6.1The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious J…
• CVE-2018-3731高 7.5public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read …