PT-2018-5202 · Marked · Marked

Publicado

2018-01-02

·

Atualizado

2020-05-31

·

CVE-2017-1000427

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions marked versions 0.3.6 and earlier
Description The issue is related to an XSS attack in the data: URI parser.
Recommendations For versions 0.3.6 and earlier, update to a version that fixes the XSS issue in the data: URI parser. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-1000427
GHSA-7PX7-7XJX-HXM8

Produtos afetados

Marked