Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4OG0tOTUzdy04cjJj

rendertron XSS vulnerability

Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.

Permalink: https://github.com/advisories/GHSA-j88m-953w-8r2c
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4OG0tOTUzdy04cjJj
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 6 years ago
Updated: over 1 year ago

CVSS Score: 6.1
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Percentage: 0.00072
EPSS Percentile: 0.33395

Identifiers: GHSA-j88m-953w-8r2c, CVE-2017-18352
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-18352
• https://github.com/GoogleChrome/rendertron/pull/88
• https://github.com/GoogleChrome/rendertron/commit/8d70628c96ae72eff6eebb451d26fc9ed6b58b0e
• https://bugs.chromium.org/p/chromium/issues/detail?id=759111
• https://github.com/advisories/GHSA-j88m-953w-8r2c

Repository: https://github.com/GoogleChrome/rendertron
Blast Radius: 5.5

Affected Packages