Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Cameron Lonsdale

#43133de 53,779
6.1CVSS total
Vulnerabilidades · 1
PT-2019-14207
6.1
2019-08-26
Geckoboard · Status Board · CVE-2019-15478
**Name of the Vulnerable Software and Affected Versions** Status Board version 1.1.81 status-board versions all **Description** The issue is related to Cross-Site Scripting. The `renderJsDashboard()` function is vulnerable due to insufficient sanitization of the `safeDashboard` variable. If this variable is controlled by user input, it may allow attackers to execute arbitrary JavaScript in a victim's browser. **Recommendations** For Status Board version 1.1.81, consider disabling the `renderJsDashboard()` function until a patch is available. For status-board all versions, consider using an alternative package until a fix is made available.