CVE-2015-3296
2 advisories.
npm/nodebb CVE-2015-3296: medium 6.1
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Action: Upgrade nodebb to 0.70 or later.
npm i nodebb@0.70Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.70 | - |
Fixed versions
| 0.70 |
Sources
- osv: GHSA-9g4f-5rpg-4948
- https://nvd.nist.gov/vuln/detail/CVE-2015-3296
- https://github.com/NodeBB/NodeBB/issues/2273
- https://github.com/NodeBB/nodebb-plugin-markdown/commit/ab7f2684750882f7baefbfa31db8d5aac71e6ec3
- https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3
- https://web.archive.org/web/20200228230630/http://www.securityfocus.com/bid/71824
- http://www.openwall.com/lists/oss-security/2015/04/10/10
CVE-2015-3296 · published · modified · JSON
npm/nodebb-plugin-markdown CVE-2015-3296: medium 6.1
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Action: Upgrade nodebb-plugin-markdown to 5.1.1 or later.
npm i nodebb-plugin-markdown@5.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.1 | - |
Fixed versions
| 5.1.1 |
Sources
- osv: GHSA-9g4f-5rpg-4948#npm/nodebb-plugin-markdown
- https://nvd.nist.gov/vuln/detail/CVE-2015-3296
- https://github.com/NodeBB/NodeBB/issues/2273
- https://github.com/NodeBB/nodebb-plugin-markdown/commit/ab7f2684750882f7baefbfa31db8d5aac71e6ec3
- https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3
- https://web.archive.org/web/20200228230630/http://www.securityfocus.com/bid/71824
- http://www.openwall.com/lists/oss-security/2015/04/10/10
CVE-2015-3296 · published · modified · JSON