Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2014-125088: fix XSS vector in document body issue in header.qml · qt-users-jp/silk@bbc5d6e

A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated remotely. The name of the patch is bbc5d6eeea800025ef29edda3fd3c57836239eae. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-221488.

CVE
#xss#vulnerability#git

Skip to content

Sign up

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

*   Explore
*   All features
*   Documentation
*   GitHub Skills
*   Blog
    • For

    • Enterprise

    • Teams

    • Startups

    • Education

    • By Solution

    • CI/CD & Automation

    • DevOps

    • DevSecOps

    • Case Studies

    • Customer Stories

    • Resources

    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

*   Repositories
*   Topics
*   Trending
*   Collections
  • Pricing

  • In this repository All GitHub

  • No suggested jump to results

  • In this repository All GitHub

  • In this organization All GitHub

  • In this repository All GitHub

Sign in

Sign up

qt-users-jp / silk Public

  • Notifications
  • Fork 2
  • Star 10
  • Code
  • Issues
  • Pull requests
  • Actions
  • Projects
  • Wiki
  • Security
  • Insights

More

Permalink

Browse files

fix XSS vector in document body issue in header.qml

Change-Id: Icb0981b2aed71f4b7e7d189eea27d5a69ef228e4 Reviewed-on: http://cr.qtquick.me/874 Tested-by: http://ci.qtquick.me/ Tested-by: R Kake [email protected] Reviewed-by: R Kake [email protected] Tested-by: Tasuku Suzuki [email protected] Reviewed-by: Tasuku Suzuki [email protected]

  • Loading branch information

task-jp committed

Oct 23, 2014

1 parent ad47a8b commit bbc5d6e

Showing 1 changed file with 2 additions and 2 deletions.

4 contents/root/examples/header.qml

Show comments View file

@@ -39,10 +39,10 @@ Html {

Repeater {

model: http.requestHeader

Component {

Dt { text: model.key }

Dt { text: Silk.escapeHTML(model.key) }

}

Component {

Dd { text: model.value }

Dd { text: Silk.escapeHTML(model.value) }

}

}

}

0 comments on commit bbc5d6e

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907