Description
GitBook through 2.6.9 allows XSS via a local .md file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | gitbook | <= 2.6.9 | — | GHSA-hwgp-c653-6684 |
Medium · 5.4
CVE-2019-19596
EUVD-2022-4227GHSA-hwgp-c653-6684
GitBook allows Cross-site Scripting via a local .md file.
Published Dec 5, 2019 · Updated Aug 5, 2024 · Assigned by mitre