Unrated

CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: UR...

CVE-2019-15499 First seen on SecPulse Aug 23, 2019

Original description The description as published by the source.

CodiMD 1.3.1, when Safari is used, allows XSS via an IFRAME element with allow-top-navigation in the sandbox attribute, in conjunction with a data: URL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report github.com

Key facts

Severity: Unrated
Published: Aug 23, 2019
First seen on SecPulse: Aug 23, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50