npm/yui CVE-2013-4942: medium, EPSS 1.19%
YUI Cross-site Scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | - | 3.9.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9ww8-j8j2-3788
- https://nvd.nist.gov/vuln/detail/CVE-2013-4942
- https://moodle.org/mod/forum/discuss.php?d=232496
- https://web.archive.org/web/20130909203912/http://yuilibrary.com/support/20130515-vulnerability
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39678
CVE-2013-4942 · published · modified · JSON