Lucene search
Veracode Vulnerability DatabaseVERACODE:21404HistoryAug 30, 2019 - 7:21 a.m.
Cross-Site Scripting (XSS)
2019-08-3007:21:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
35.9%
webtorrent is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the title or filename parameters in the metadata of a torrent file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webtorrent | le | 0.107.5 |
Related
github
github
Cross-Site Scripting in webtorrent
2019-09-04 10:02:50
nodejs
nodejs
Cross-Site Scripting
2019-09-06 19:02:30
hackerone
hackerone
Brave Software: Stored XSS in localhost:* via integrated torrent downloader
2019-08-25 12:34:31
nvd
nvd
CVE-2019-15782
2019-08-29 12:15:11
prion
prion
Cross site scripting
2019-08-29 12:15:00
cvelist
cvelist
CVE-2019-15782
2019-08-29 11:07:38
githubexploit
githubexploit
Exploit for Cross-site Scripting in Webtorrent
2020-12-01 09:18:58
cve
cve
CVE-2019-15782
2019-08-29 12:15:11
osv
osv
Cross-Site Scripting in webtorrent
2019-09-04 10:02:50
CVE-2019-15782
2019-08-29 12:15:11