CVE-2017-16019

2018-06-0419:29:01

Google

osv.dev

0.001 Low

EPSS

Percentile

33.1%

JSON

GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code will be executed on the online reader.

CPENameOperatorVersion
gitbookeq0.5.0
gitbookeq1.1.0
gitbookeq2.6.7
gitbookeq0.1.2
gitbookeq2.0.0-alpha.3
gitbookeq3.1.1
gitbookeq2.0.1
gitbookeq3.0.0-pre.13
gitbookeq0.0.4
gitbookeq2.0.0-beta.5

Name	Operator	Version
gitbook	eq	0.5.0
gitbook	eq	1.1.0
gitbook	eq	2.6.7
gitbook	eq	0.1.2
gitbook	eq	2.0.0-alpha.3
gitbook	eq	3.1.1
gitbook	eq	2.0.1
gitbook	eq	3.0.0-pre.13
gitbook	eq	0.0.4
gitbook	eq	2.0.0-beta.5