GHSA-m22q-97p5-79v2

Source

https://github.com/advisories/GHSA-m22q-97p5-79v2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-m22q-97p5-79v2/GHSA-m22q-97p5-79v2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-m22q-97p5-79v2

Aliases

CVE-2021-32851

Published

2023-02-21T00:30:20Z

Modified

2023-11-08T04:06:02Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Mind-elixir Cross-site Scripting vulnerability

Details

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1.

Database specific

{
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-02-22T00:11:36Z",
    "nvd_published_at": "2023-02-20T22:15:00Z",
    "severity": "MODERATE"
}

References

Affected packages

npm / mind-elixir

Package

Name: mind-elixir; View open source insights on deps.dev
Purl: pkg:npm/mind-elixir

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.18.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-m22q-97p5-79v2/GHSA-m22q-97p5-79v2.json"