Security Advisory

CVE-2020-28487

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-01-22 17:15:20
Last updated 2024-09-17 02:47:35
Assigner snyk
CVSS score 6.8
State PUBLISHED

Description

This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application.