Description
Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | rendertron | < 1.1.0 | 1.1.0 | GHSA-j88m-953w-8r2c |
Medium · 6.1
CVE-2017-18352
EUVD-2019-0188GHSA-j88m-953w-8r2c
rendertron XSS vulnerability
Published Dec 17, 2018 · Updated Aug 5, 2024 · Assigned by mitre