Lucene search
GoogleOSV:GHSA-5P26-HW7F-3CPRHistoryFeb 07, 2019 - 6:14 p.m.
Cross-Site Scripting in html-pages
2019-02-0718:14:44
Google
osv.dev
11
EPSS
0.001
Percentile
37.3%
All versions of html-pages are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize folder names, allowing attackers to execute arbitrary JavaScript in the victim’s browser through folders with names containing malicious code.
Recommendation
No fix is currently available. Consider using an alternative package until a fix is made available.
Related
nodejs
nodejs
Cross-Site Scripting
2019-06-19 14:48:11
veracode
veracode
Cross-site Scripting (XSS)
2019-02-04 00:54:49
prion
prion
Cross site scripting
2019-02-01 18:29:00
github
github
Cross-Site Scripting in html-pages
2019-02-07 18:14:44
cvelist
cvelist
CVE-2018-16481
2019-02-01 18:00:00
nvd
nvd
CVE-2018-16481
2019-02-01 18:29:00
cve
cve
CVE-2018-16481
2019-02-01 18:29:00
hackerone
hackerone