Cross Site Scripting Vulnerability in fabric-sdk-py source code
H
Hyperledger
Submitted None
Actions:
Reported by
bhaskar_ram
Vulnerability Details
Technical details and impact analysis
See this fix on GitHub
https://github.com/hyperledger/fabric-sdk-py/pull/175
## Impact
Some old affected versions of this package are vulnerable to Cross-site Scripting (XSS). Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Submitted
Weakness
Cross-site Scripting (XSS) - DOM