~ / search / GHSA-94hc-7qc9-34rf

GHSA-94hc-7qc9-34rf

Canvs Canvas XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-1000507

Packages

EcosystemPackageAffectedFixed in
Packagist austintoddj/canvas <= 3.4.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code.

References

External links from the advisory. They lead to third-party sites.