CVE-2021-43635

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code…

published February 4, 2022

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01776 · 78.0th percentile
Published
2022-02-04T17:40Z
EPSS history
Timeline
  • 04 FEB 17:40Z
    A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code…
    cvelistv5