Description

Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://jvn.jp/en/jp/JVN94889214/index.html

https://github.com/line/centraldogma/releases/tag/centraldogma-0.41.0

Related Vulnerabilities

CVE-2020-2244 Vulnerability in maven package org.jenkins-ci.plugins:build-failure-analyzer

CVE-2015-7559 Vulnerability in maven package org.apache.activemq:activemq-all

CVE-2021-23355 Vulnerability in npm package ps-kill

CVE-2020-28847 Vulnerability in npm package valine

CVE-2020-2125 Vulnerability in maven package ru.yandex.jenkins.plugins.debuilder:debian-package-builder

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory Release Notes