← CVE Intelligence

CVE-2017-0928

HackerOne / html-janitor node module PUBLISHED

Description (CNA)

html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.

Affected (CNA)

Vendor / productVersions
HackerOne / html-janitor node moduleaffected All versions

CWE

CWE-642

References

ADP enrichment

CVE

No English description supplied.