漏洞信息详情
Junedchhipa ApexCharts 跨站脚本漏洞
漏洞简介
Junedchhipa ApexCharts是印度Junedchhipa个人开发者的一个应用软件。提供开源图表的功能。
Apexcharts 中存在跨站脚本漏洞,该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
参考网址
来源:CONFIRM
链接:https://github.com/apexcharts/apexcharts.js/pull/2158
来源:CONFIRM
链接:https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19
来源:CONFIRM
链接:https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616
来源:CONFIRM
链接:https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-watson-openscale-on-cloud-pak-for-data-is-impacted-by-vulnerabilities-in-node-js/
受影响实体
暂无
补丁
- Junedchhipa ApexCharts 跨站脚本漏洞的修复措施<!--2021-2-9-->
还没有评论,来说两句吧...