What is GHSA-9p29-94hp-8rvc?

GHSA-9p29-94hp-8rvc is a security advisory published by GitHub Security Advisories with Medium severity. qiita-markdown Cross-site Scripting vulnerability

Which CVE IDs does GHSA-9p29-94hp-8rvc cover?

GHSA-9p29-94hp-8rvc covers the following CVE IDs: CVE-2021-28833. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9p29-94hp-8rvc?

GHSA-9p29-94hp-8rvc has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-9p29-94hp-8rvc?

GHSA-9p29-94hp-8rvc affects 1 product, including: rubygems/qiita-markdown:\u003c 0.34.0.

GHSA-9p29-94hp-8rvcMediumCVSS 6.1

qiita-markdown Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

August 2, 2021

Last Modified

March 31, 2023

🔗 CVE IDs covered (1)

CVE-2021-28833 →

📋 Description

Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796.

🎯 Affected products1

rubygems/qiita-markdown:< 0.34.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2021-28833
https://github.com/increments/qiita-markdown/releases
https://vuln.ryotak.me/advisories/50
https://github.com/increments/qiita-markdown/commit/b5d4e60bf537ceb177e70bf91653d29575e1aa21
https://github.com/increments/qiita-markdown/compare/v0.33.0...v0.34.0
https://github.com/advisories/GHSA-9p29-94hp-8rvc