CVE-2015-1370

4.3

MEDIUMCVSS v2

Published

January 27, 2015

Affected

3 projects

Assigned by

Red Hat

Severity scale

010

Description

Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a link.

marked

NPMA markdown parser built for speed

<= 0.3.2NVD

markedjs/marked

GitHubA markdown parser and compiler. Built for speed.

<= 0.3.2NVD

chjj/marked

GitHub

More on this CVE

NVD↗GitHub Advisory↗

<= 0.3.2NVD

Security Advisories

CVE-2015-1370

Description

More on this CVE