Lucene search
GoogleOSV:CVE-2016-10548HistoryMay 31, 2018 - 8:29 p.m.
CVE-2016-10548
2018-05-3120:29:01
Google
osv.dev
5
EPSS
0.002
Percentile
56.6%
Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function.
Related
nodejs
nodejs
Arbitrary Code Injection
2016-08-25 13:21:44
osv
osv
Arbitrary Code Injection in reduce-css-calc
2018-06-07 19:43:06
prion
prion
Code injection
2018-05-31 20:29:00
github
github
Arbitrary Code Injection in reduce-css-calc
2018-06-07 19:43:06
cvelist
cvelist
CVE-2016-10548
2018-05-31 20:00:00
cve
cve
CVE-2016-10548
2018-05-31 20:29:01
nvd
nvd
CVE-2016-10548
2018-05-31 20:29:01