MEDIUM
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser
Published Jan 2, 2018
6.1
MEDIUMCVSS 3.0
EPSS 1.51%
Description
marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.
Affected products
No data.
- ≤ 0.3.6
No data.
No Red Hat product state for this CVE.
marked
npm
Introduced 0 Fixed 0.3.7
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | marked | 0 | 0.3.7 |
Remediation
No remediation recorded yet.
Weaknesses (1)
References (8)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0154 Advisory
- https://github.com/advisories/GHSA-7px7-7xjx-hxm8 Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/ vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000427
- https://snyk.io/vuln/npm:marked:20170112 x_refsource_MISCExploitPatchThird Party Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 2, 2018
Updated Aug 5, 2024
Reserved Jan 2, 2018
Link CVE-2017-1000427
CISA Vulnrichment
No data
Red Hat
No data
GitHub
Link GHSA-7PX7-7XJX-HXM8