xmlhttprequest-ssl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2020-28502 Public exploit

Arbitrary Code Injection

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr.open), malicious user input flowing into xhr.send could result in arbitrary code being injected and …

node-xmlhttprequest-ssl xmlhttprequest-ssl xmlhttprequest node-xmlhttprequest Debian Ubuntu npm

Mar 5, 2021