CVE-2018-17574
CVE-2018-17574
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.
CVSS 5.4 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
yapi-vendor npm
- Affected ranges
- SEMVER: < 1.3.23
Update to 1.3.23