CVE-2017-18635

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages…

published September 25, 2019

CVSS
—
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04788 · 91.8th percentile
Published
2019-09-25T22:59Z
EPSS history
Timeline
  • 25 SEP 22:59Z
    An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages…
    cvelistv5