Description

simple-markdown.js in Khan Academy simple-markdown before 0.4.4 allows XSS via a data: or vbscript: URI.

Remediation

References

https://www.npmjs.com/package/simple-markdown/v/0.4.4

https://github.com/Khan/simple-markdown/pull/63

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZG2I7VH7WLSEUQ77KYP5CRAVFT2RK2U/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFLP3KJVSV5VWMNEBRXLGRVYFXOV5KOG/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O5EFW655O3BXZYAPB65XEREXB2DSNSOT/

Related Vulnerabilities

CVE-2016-10596 Vulnerability in npm package imageoptim

CVE-2020-7750 Vulnerability in npm package scratch-svg-renderer

CVE-2016-5003 Vulnerability in maven package org.apache.xmlrpc:xmlrpc

CVE-2020-7618 Vulnerability in npm package sds

CVE-2021-23382 Vulnerability in npm package postcss

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory