What is GHSA-488m-6gh8-9j36?

GHSA-488m-6gh8-9j36 is a security advisory published by GitHub Security Advisories with Medium severity. bracket-template vulnerable to reflected XSS

Which CVE IDs does GHSA-488m-6gh8-9j36 cover?

GHSA-488m-6gh8-9j36 covers the following CVE IDs: CVE-2018-3735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-488m-6gh8-9j36?

GHSA-488m-6gh8-9j36 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-488m-6gh8-9j36?

GHSA-488m-6gh8-9j36 affects 1 product, including: npm/bracket-template:\u003c= 1.1.5.

GHSA-488m-6gh8-9j36MediumCVSS 6.1

bracket-template vulnerable to reflected XSS

Vendor

GitHub Security Advisories

Published

July 27, 2018

Last Modified

September 11, 2023

🔗 CVE IDs covered (1)

CVE-2018-3735 →

📋 Description

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

🎯 Affected products1

npm/bracket-template:<= 1.1.5

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-3735
https://hackerone.com/reports/317125
https://github.com/advisories/GHSA-488m-6gh8-9j36