Cross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated users to inject arbitrary web script or HTML via crafted markdown.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/36463/ | Third Party Advisory VDB Entry |
http://www.telescopeapp.org/blog/telescope-v093-dailyscope/ | Vendor Advisory |
Configurations
Information
Published : 2017-08-09 11:29
Updated : 2017-08-18 05:18
NVD link : CVE-2014-5144
Mitre link : CVE-2014-5144
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
telescopeapp
- telescope