CVE-2018-12104

Published June 17th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/new_report.kp URI.

airbnb/knowledge-repo

A next-generation curated knowledge sharing platform for data scientists and other technical professions.

GitHub

5.54K