CVE-2018-8046

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data

published July 5, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
67%
Percentile
99.3
In the wild
Unconfirmed
What it is

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework brings no built-in XSS protection, so the developer has to ensure that data is correctly sanitized. However, the getTip() method of Action Columns takes HTML-escaped data and un-escapes it. If the tooltip contains user-controlled data, an attacker could exploit this to create a cross-site scripting attack, even when developers took precautions and escaped data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.66565 · 99.3th percentile
Published
2018-07-05T20:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 67% → 43%
    epss
  • 06 SEP 03:12Z
    EPSS moved 67% → 43%
    epss
  • 30 AUG 16:01Z
    EPSS moved 43% → 67%
    epss
  • 29 AUG 04:42Z
    EPSS moved 67% → 43%
    epss
  • 05 JUL 20:00Z
    The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data
    cvelistv5