GHSA-589w-hccm-265x
Suggest an improvement- Source
- https://github.com/advisories/GHSA-589w-hccm-265x
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/10/GHSA-589w-hccm-265x/GHSA-589w-hccm-265x.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-589w-hccm-265x
- Aliases
- Related
- Published
- 2020-10-19T20:17:47Z
- Modified
- 2023-11-08T04:02:35.955626Z
- Severity
-
- 8.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N CVSS Calculator
- Summary
- Inline attribute values were not processed.
- Details
-
Impact
Inline attributes have not been processed escape. If the data that came from users was not processed, then an XSS vulnerability is possible
Patches
Fixed in 9.4.4
- Database specific
{ "github_reviewed": true, "severity": "HIGH", "nvd_published_at": null, "github_reviewed_at": "2020-10-19T20:17:37Z", "cwe_ids": [ "CWE-79" ] }- References
Affected packages
Packagist / orchid/platform
Package
- Name
- orchid/platform
- Purl
- pkg:composer/orchid/platform