CVE-2017-1000491 - Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration

MEDIUM

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration

Published Jan 3, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.11%

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

Ecosystem	Package	Introduced	Fixed
npm	shiba	0	1.1.1

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/advisories/GHSA-jr64-pggr-j8xj		Advisory
https://github.com/rhysd/Shiba/commit/e8a65b0f81eb04903eedd29500d7e1bedf249eab		x_refsource_CONFIRMPatchThird Party Advisory
https://github.com/rhysd/Shiba/issues/42		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000491