Description
MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | de.ipb-halle:molecularfaces | < 0.3.0 | 0.3.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | de.ipb-halle:molecularfaces | < 0.3.0 | 0.3.0 | GHSA-2pwh-52h7-7j84 |
References
- GitHub Security Advisory (GHSA-2pwh-52h7-7j84) vendor-advisory
- GitHub Security Advisory (GHSA-2pwh-52h7-7j84) vendor-advisory
- https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84 third-party-advisory