Description

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.

Remediation

References

https://github.com/jaredhanson/oauth2orize-fprm/blob/master/SECURITY-NOTICE.md

https://github.com/jaredhanson/oauth2orize-fprm/commit/2bf9faee787eb004abbdfb6f4cc2fb06653defd5

Related Vulnerabilities

CVE-2016-1000229 Vulnerability in maven package org.webjars.npm:swagger-ui

CVE-2022-35980 Vulnerability in maven package org.opensearch.plugin:opensearch-security

CVE-2023-26152 Vulnerability in npm package static-server

CVE-2019-3875 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2020-7726 Vulnerability in npm package safe-object2

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory Patch