CVE-2013-7453 - The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing

Back Back to CVE browser

MEDIUM

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing

Published Jan 23, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 1.86%

Description

The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing.

Affected products

Ecosystem	Package	Introduced	Fixed
npm	validator	0	1.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://www.openwall.com/lists/oss-security/2016/04/20/11
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-552w-rqg8-gxxm
Advisory
https://nodesecurity.io/advisories/41
x_refsource_CONFIRMMitigationVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-7453

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2016/04/20/11		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/advisories/GHSA-552w-rqg8-gxxm		Advisory
https://nodesecurity.io/advisories/41		x_refsource_CONFIRMMitigationVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-7453