logo

Database

Server side cross-site scripting In wikimedia/parsoid

Description

multiple issues

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-304582. NVD-2021-304583. OSV-2021-304584. OSV-DEBIAN-2021-304585. GCVE-2021-304586. security.gentoo.org7. SECURITY-TRACKER-CVE-2021-30458

References

1. https://github.com/FriendsOfPHP/security-advisories/blob/master/wikimedia/parsoid/CVE-2021-30458.yaml2. https://phabricator.wikimedia.org/T2794513. https://www.mediawiki.org/wiki/Parsoid

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.