Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5866
HistoryMar 01, 2018 - 3:10 a.m.

Cross-site Scripting (XSS)

2018-03-0103:10:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
204

EPSS

0.001

Percentile

50.1%

anywhere is vulnerable to cross-site scripting (XSS) attacks. The library uses a version of the serve-index package that is vulnerable to CVE-2015-8856, allowing a malicious user to inject and execute arbitrary Javascript.