GHSA-jjg9-mf63-vqrp

Suggest an improvement
Source
https://github.com/advisories/GHSA-jjg9-mf63-vqrp
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jjg9-mf63-vqrp/GHSA-jjg9-mf63-vqrp.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-jjg9-mf63-vqrp
Aliases
  • CVE-2012-5881
Published
2022-05-17T01:38:30Z
Modified
2024-01-09T22:11:46.839789Z
Summary
Cross-site scripting in yui 2.4.0
Details

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.

Database specific 
{
    "github_reviewed": true,
    "nvd_published_at": "2012-11-16T12:24:00Z",
    "severity": "MODERATE",
    "github_reviewed_at": "2024-01-09T21:54:51Z",
    "cwe_ids": [
        "CWE-79"
    ]
}
References

Affected packages

npm / yui2

Package

Name
yui2
View open source insights on deps.dev
Purl
pkg:npm/yui2

Affected ranges

Type
SEMVER
Events
Introduced
2.4.0
Last affected
2.9.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jjg9-mf63-vqrp/GHSA-jjg9-mf63-vqrp.json"