Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-15881
4.8
MEDIUMCVSS v3
Published
October 24, 2017
CVSS v2
3.5 LOW
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vulnerability than CVE-2017-15878.
keystonejs/keystone
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React<= 0.3.22, = 4.0.0, < 4.0.0-beta7NVD
openstack/keystoneGitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.<= 0.3.22, = 4.0.0, < 4.0.0-beta7NVD