Cross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content
References
Link | Resource |
---|---|
https://blog.cryptpad.fr/2017/03/06/Security-growing-pains/ | Third Party Advisory |
https://github.com/xwiki-labs/cryptpad/releases/tag/1.1.1 | Release Notes Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-07-13T20:00:00
Updated: 2017-07-13T19:57:01
Reserved: 2017-07-10T00:00:00
Link: CVE-2017-1000051
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-07-17T13:18:17.563
Modified: 2017-07-20T19:59:15.483
Link: CVE-2017-1000051
JSON object: View
Redhat Information
No data.
CWE