logo

Database

Reflected cross-site scripting (XSS) In node-marked

Description

Marked vulnerable to XSS from data URIs marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2017-10004272. NVD-2017-10004273. OSV-DEBIAN-2017-10004274. OSV-2017-10004275. GHSA-7px7-7xjx-hxm86. GCVE-2017-10004277. SECURITY-TRACKER-CVE-2017-1000427

References

1. https://lists.fedoraproject.org/archives/list/[email protected]/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS2. https://lists.fedoraproject.org/archives/list/[email protected]/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S3. https://lists.fedoraproject.org/archives/list/[email protected]/message/BO2RMVVZVV6NFTU46B5RYRK7ZCXYARZS/4. https://lists.fedoraproject.org/archives/list/[email protected]/message/M6BJG6RGDH7ZWVVAUFBFI5L32RSMQN2S/

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.