Lucene search
PRIOn knowledge basePRION:CVE-2021-23439HistorySep 05, 2021 - 2:15 p.m.
Design/Logic Flaw
2021-09-0514:15:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
34.7%
This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).
| CPE | Name | Operator | Version |
|---|---|---|---|
| file-upload-with-preview | lt | 4.2.0 |
References
github.com/johndatserakis/file-upload-with-preview/blob/develop/src/file-upload-with-preview.js%23L168
github.com/johndatserakis/file-upload-with-preview/pull/40/files?file-filters%5B%5D=.js&hide-deleted-files=true%23diff-fe47b243de17419c0daa22cd785cd754baed60cf3679d3da1d6fe006f9f4a7f0R174
snyk.io/vuln/SNYK-JS-FILEUPLOADWITHPREVIEW-1579492
Related
veracode
veracode
Cross-site Scripting (XSS)
2021-09-06 02:23:18
nvd
nvd
CVE-2021-23439
2021-09-05 14:15:07
cve
cve
CVE-2021-23439
2021-09-05 14:15:07
github
github
Cross-site Scripting in file-upload-with-preview
2021-09-07 23:08:54
osv
osv
Cross-site Scripting in file-upload-with-preview
2021-09-07 23:08:54
cvelist
cvelist
CVE-2021-23439 Cross-site Scripting (XSS)
2021-09-05 00:00:00