← Back

Risingstack

risingstack

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Protect
protect
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1000160
1Risingstack
1Protect
Nov 21, 2024
Apr 18, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appe...Show more
RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings(26) detailed in the GitHub issue #16.Show less