Valine HTML Injection

보통 6.1CVE-2018-19289 · GHSA-hhrp-qm88-xjr3 · Published 15/11/2018 · updated 17/06/2026

요약

CVE-2018-19289은(는) valine (valine.js), valine에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.2%, 전체 취약점의 68.9%보다 높음.
조치: 1.3.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
valine valine.js	`= 1.3.3`	No fix yet
valine npm	`< 1.3.4`	`1.3.4`

Description

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.

NVD description

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.

References

nvd.nist.gov/vuln/detail/CVE-2018-19289 · ADVISORY
xCss/Valine · WEB
xCss/Valine commit 32d4d5e · WEB
GitHub Advisory GHSA-hhrp-qm88-xjr3 · ADVISORY
xCss/Valine · PACKAGE

valine의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

valine

valine.js

= 1.3.3

No fix yet

valine

npm

< 1.3.4

1.3.4

Description

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.

NVD description

An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file.

valine의 다른 취약점

모두 보기 →