CVE-2021-46872

An issue was discovered in Nim before 1.6.2

Medium · published January 13, 2023

CVSS v3.1
6.1
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00537 · 44.5th percentile
Published
2023-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    An issue was discovered in Nim before 1.6.2
    cvelistv5