Description (CNA)
govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 2.0.2 before 3.3.1 |
CWE
CWE-79
References
- https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
- https://github.com/alphagov/tech-docs-gem/pull/323
- https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
- https://github.com/advisories/GHSA-x2xw-hw8g-6773
- https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773
ADP enrichment
No English description supplied.
- https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
- https://github.com/alphagov/tech-docs-gem/pull/323
- https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
- https://github.com/advisories/GHSA-x2xw-hw8g-6773
- https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773
No English description supplied.
No references supplied.