FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-29 07:54:42 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
40b481a9-9df7-11eb-9bc3-8c164582fbacmdbook -- XSS in mdBook's search page

Rust Security Response Working Group reports:

The search feature of mdBook (introduced in version 0.1.4) was affected by a cross site scripting vulnerability that allowed an attacker to execute arbitrary JavaScript code on an user's browser by tricking the user into typing a malicious search query, or tricking the user into clicking a link to the search page with the malicious search query prefilled. mdBook 0.4.5 fixes the vulnerability by properly escaping the search query.


Discovery 2021-04-01
Entry 2021-04-15
mdbook
< 0.4.5

https://github.com/rust-lang/mdBook/blob/master/CHANGELOG.md#mdbook-045
https://github.com/rust-lang/mdBook/commit/32abeef088e98327ca0dfccdad92e84afa9d2e9b
https://github.com/rust-lang/mdBook/security/advisories/GHSA-gx5w-rrhp-f436
https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0?pli=1
https://nvd.nist.gov/vuln/detail/CVE-2020-26297
CVE-2020-26297