PT-2020-21395 · Unknown · React-Marked-Markdown

Published 2020-09-01 · Updated 2020-09-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions react-marked-markdown versions (affected versions not specified)

Description The issue concerns cross-site scripting (XSS) via href attributes in react-marked-markdown. This can be exploited when a user is provided to react-marked-markdown. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-M7QM-R2R5-F77Q

Affected Products

React-Marked-Markdown

References · 5

• https://osv.dev/vulnerability/GHSA-m7qm-r2r5-f77q · Vendor Advisory
• ❌ https://github.com/Vincent-P/react-marked-markdown/issues/61 · Note, Deleted
• ❌ https://github.com/Vincent-P/react-marked-markdown · Note, Deleted
• https://hackerone.com/reports/344069 · Note
• https://npmjs.com/advisories/668 · Note