~ / search / GHSA-649c-x44h-4q7v

GHSA-649c-x44h-4q7v

Tnantoka/public XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-16480

Packages

EcosystemPackageAffectedFixed in
npm public < 0.1.4 0.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.

References

External links from the advisory. They lead to third-party sites.