Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12047
4.3
MEDIUMCVSS v2
Published
May 13, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.
GitHub