CVE-2017-16043
UNKNOWN
Published 2018-06-04T19:00:00Z
Actions:
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2017-16043. We'll provide specific mitigation strategies based on your environment and risk profile.
No CVSS data available
Description
Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.
Available Exploits
No exploits available for this CVE.
Related News
No news articles found for this CVE.
Affected Products
Affected Versions:
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
Affected versions of `shout` do not escape the `/topic` command in messages, and are therefore vulnerable to cross-site scripting.
## Recommendation
Update to version 0.50.0 or later.
Affected Packages
npm
shout
ECOSYSTEM:
≥0.44.0
<0.50.0
CVSS Scoring
CVSS Score
5.0
References
Advisory provided by GitHub Security Advisory Database. Published: November 7, 2018, Modified: August 31, 2020
Published: 2018-06-04T19:00:00Z
Last Modified: 2024-09-16T16:58:10.449Z
Copied to clipboard!