Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-15878
4.3
MEDIUMCVSS v2
Published
October 24, 2017
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.
keystonejs/keystone
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React< 4.0.0NVD
openstack/keystoneGitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.< 4.0.0NVD