CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.
CVE
CVE-2019-10756
Severity
MEDIUM
CVSS
5.4
EPSS
0.57%
Java
Original NVD Description
It is possible to inject JavaScript within node-red-dashboard versions prior to version 2.17.0 due to the ui_notification node accepting raw HTML by default.
Related CVEs
Other vulnerabilities affecting the same vendor(s)