Astro is vulnerable to Reflected XSS via the server islands feature
58Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 7.1epss 0.5%
da publicação à arma
Publicada no NVD19 de nov.
VulnCheck+26d
probabilidade de exploração
0.5%top 60% das CVEs
exploração observada
simVulnCheck
Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component template(s). This issue has been patched in version 5.15.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Produtos afetados
withastro · astro