PT-2022-8063 · Unknown · Moappi Json2Html

Published 2022-12-28 · Updated 2024-05-17 · CVE-2018-25053

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions moappi Json2html versions up to 1.1.x

Description A vulnerability was found in moappi Json2html, which affects some unknown processing of the file json2html.js. The manipulation leads to cross site scripting. The attack may be initiated remotely.

Recommendations For moappi Json2html versions up to 1.1.x, upgrade to version 1.2.0 to address this issue. As a temporary workaround, consider restricting the use of the json2html.js file until the upgrade is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-25053

GHSA-79MP-CXP4-9P6R

Affected Products

Moappi Json2Html

References · 10

• https://github.com/moappi/json2html/commit/2d3d24d971b19a8ed1fb823596300b9835d55801 · Patch
• https://github.com/moappi/json2html/releases/tag/1.2.0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-25053 · Security Note
• https://osv.dev/vulnerability/CVE-2018-25053 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-79mp-cxp4-9p6r · Vendor Advisory
• https://github.com/moappi/json2html · Note
• https://t.me/cvenotify/40890 · Telegram Post
• https://vuldb.com/?id.216959 · Note
• https://t.me/cibsecurity/55474 · Telegram Post
• https://vuldb.com/?ctiid.216959 · Note