CVE-2020-13697
1 advisory.
Maven/org.nanohttpd:nanohttpd-nanolets CVE-2020-13697: medium, EPSS 0.76%
NanoHTTPD Cross-site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pr5m-4w22-8483
- https://nvd.nist.gov/vuln/detail/CVE-2020-13697
- https://github.com/NanoHttpd/nanohttpd
- https://github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/nanolets/pom.xml
- https://github.com/NanoHttpd/nanohttpd/blob/efb2ebf85a2b06f7c508aba9eaad5377e3a01e81/nanolets/src/main/java/org/nanohttpd/router/RouterNanoHTTPD.java
- https://www.vdoo.com/advisories/#CVE-2020-13697
CVE-2020-13697 · published · modified · JSON