Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2020-8127
Good to know:
Date: February 28, 2020
Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks.
Language: Java
Severity Score
Severity Score
Weakness Type (CWE)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79Top Fix
Upgrade Version
Upgrade to version yeswiki/yeswiki - dev-fix-attach-picture-in-pageSpecial;yeswiki/yeswiki - dev-fix-remove-warning-in-bazar.fonct;yeswiki/yeswiki - no_fix;yeswiki/yeswiki - dev-fix-semantic-fields;yeswiki/yeswiki - dev-not-render-field-when-empty;yeswiki/yeswiki - dev-improve-metadata-field;yeswiki/yeswiki - dev-sync-createur-owner-for-entry;yeswiki/yeswiki - dev-add-api-extension-doc;yeswiki/yeswiki - dev-feat-select-entries-html;yeswiki/yeswiki - dev-fix-creation-empty-id_fiche;yeswiki/yeswiki - dev-idea-bazar-yaml-for-color-mapping-carto;yeswiki/yeswiki - dev-fix-mail-sendmail;yeswiki/yeswiki - dev-fix-edit-button-on-link;yeswiki/yeswiki - dev-refacto/baz_rechercher;yeswiki/yeswiki - dev-refacto/fix-radio-list-field;yeswiki/yeswiki - dev-refacto/baz_rechercher-fix1;yeswiki/yeswiki - dev-add-management-of-custom-fields;yeswiki/yeswiki - dev-fixbug-acl-display-email-and-handlers;yeswiki/yeswiki - dev-proposal-to-prevent-sql-error;yeswiki/yeswiki - dev-fix-bazar-local;yeswiki/yeswiki - dev-rip-carte_google;yeswiki/yeswiki - dev-custom-templates;yeswiki/yeswiki - dev-fix/section-cover;yeswiki/yeswiki - dev-improve-link-traking;bit3/contao-theme-reveal-js-basic - no_fix;FsReveal - 0.7.3;FsReveal - no_fix;thelia/index-engine-module - 1.0;olevik/grav-plugin-presentation - dev-dependabot/npm_and_yarn/follow-redirects-1.14.7;olevik/grav-plugin-presentation - v3.0.1;olevik/grav-plugin-presentation - no_fix;knplabs/knp-reveal-bundle - no_fix;reveal.js - 3.9.2;FenixAlliance.ABS.Portal.UI - 1.3.0;FenixAlliance.ABS.Portal.UI.Core.V1 - no_fix;etdsolutions/reveal.js - no_fix;components/revealjs - no_fix;org.webjars.bower:reveal.js:no_fix;org.webjars.bower:reveal.js:3.3.0;org.webjars.npm:reveal.js:3.9.2;org.webjars:reveal.js:no_fix;org.webjars.npm:github-com-hakimel-reveal-js:no_fix
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | REQUIRED |
| Scope (S): | CHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | NONE |
CVSS v2
| Base Score: |
|
|---|---|
| Access Vector (AV): | NETWORK |
| Access Complexity (AC): | MEDIUM |
| Authentication (AU): | NONE |
| Confidentiality (C): | NONE |
| Integrity (I): | PARTIAL |
| Availability (A): | NONE |
| Additional information: |