Unrated

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrar...

CVE-2021-43635 First seen on SecPulse Feb 5, 2022

Original description The description as published by the source.

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
package github.com
report github.com

Key facts

Severity: Unrated
Published: Feb 5, 2022
First seen on SecPulse: Feb 5, 2022

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54