Lucene search
Veracode Vulnerability DatabaseVERACODE:8042HistoryDec 18, 2018 - 7:28 a.m.
Cross-Site Scripting (XSS)
2018-12-1807:28:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.01 Low
EPSS
Percentile
83.7%
rendertron is vulnerable to cross-site scripting (XSS). The vulnerability exists since the application not sanitize URLs and other parameters of the error reporting feature, allowing a remote attacker to inject arbitrary Javascript into a victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rendertron | eq | 1.0.0 | |
| chromium:stretch | eq | 70.0.3538.110-1~deb9u1 |
References
www.securityfocus.com/bid/106084
access.redhat.com/errata/RHSA-2018:3803
bugs.chromium.org/p/chromium/issues/detail?id=759111
chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
crbug.com/849942
github.com/GoogleChrome/rendertron/pull/88
security.gentoo.org/glsa/201908-18
www.debian.org/security/2018/dsa-4352
Related
cvelist
cvelist
CVE-2018-18352
2018-12-11 15:00:00
redhatcve
redhatcve
CVE-2018-18352
2018-12-05 18:52:47
prion
prion
Cross site scripting
2018-12-11 16:29:00
nvd
nvd
CVE-2018-18352
2018-12-11 16:29:01
ubuntucve
ubuntucve
CVE-2018-18352
2018-12-11 00:00:00
debiancve
debiancve
CVE-2018-18352
2018-12-11 16:29:01
cve
cve
CVE-2018-18352
2018-12-11 16:29:01
suse
suse
Security update for Chromium (important)
2018-12-15 15:08:49
Security update for Chromium (important)
2018-12-15 15:09:21
Security update for Chromium (important)
2018-12-08 15:14:53
nessus
nessus
openSUSE Security Update : Chromium (openSUSE-2018-1557)
2018-12-17 00:00:00
openSUSE Security Update : Chromium (openSUSE-2018-1521)
2018-12-10 00:00:00
Google Chrome < 71.0.3578.80 Multiple Vulnerabilities
2018-12-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:4142-1)
2018-12-18 00:00:00
Fedora Update for chromium FEDORA-2019-348547a32d
2019-01-16 00:00:00
openSUSE: Security Advisory for Chromium (openSUSE-SU-2018:4056-1)
2018-12-10 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2018-12-04 00:00:00
archlinux
archlinux
[ASA-201812-2] chromium: multiple issues
2018-12-08 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2018-12-04 00:00:00
osv
osv
chromium-browser - security update
2018-12-07 00:00:00
kaspersky
kaspersky
KLA11379 Multiple vulnerabilities in Google Chrome
2018-12-04 00:00:00
KLA11734 Multiple vulnerabilities in Opera
2018-12-12 00:00:00
debian
debian
[SECURITY] [DSA 4352-1] chromium-browser security update
2018-12-08 01:45:46
[SECURITY] [DSA 4352-1] chromium-browser security update
2018-12-08 01:45:46
redhat
redhat
(RHSA-2018:3803) Important: chromium-browser security update
2018-12-10 10:22:08
fedora
fedora
[SECURITY] Fedora 29 Update: chromium-71.0.3578.98-1.fc29
2019-01-05 02:32:22
[SECURITY] Fedora 28 Update: chromium-71.0.3578.98-1.fc28
2019-01-16 01:43:05
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2019-08-15 00:00:00