Description
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | webtorrent | < 0.107.6 | 0.107.6 | GHSA-gjh4-fcv3-whpq |
Medium · 6.1
CVE-2019-15782
EUVD-2019-0668GHSA-gjh4-fcv3-whpq
Cross-Site Scripting in webtorrent
Published Aug 29, 2019 · Updated Aug 5, 2024 · Assigned by mitre