CVE-2021-28833: qiita-markdown Cross-site Scripting… – CVSS 6.1 · Watchpost

← All vulnerabilities

qiita-markdown Cross-site Scripting vulnerability

中危 6.1CVE-2021-28833 · GHSA-9p29-94hp-8rvc · Published 21/06/2021 · updated 17/06/2026

要点

CVE-2021-28833 是影响 qiita-markdown, qiita (increments) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.74%，高于 54.8% 的漏洞。
修复：升级到 0.34.0 或更高版本。

Package	Affected versions	Patched versions
qiita-markdown RubyGems	`< 0.34.0`	`0.34.0`
qiita increments	`< 0.34.0`	`0.34.0`

Description

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

NVD description

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

References

nvd.nist.gov/vuln/detail/CVE-2021-28833 · ADVISORY
increments/qiita-markdown commit b5d4e60 · WEB
increments/qiita-markdown · PACKAGE
increments/qiita-markdown · WEB
increments/qiita-markdown release · WEB
vuln.ryotak.me/advisories/50 · WEB

qiita-markdown 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free