Graphql Playground Middleware Express

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-4038 Jun 08, 21:15 npm HIGH PATCH This Week

GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Node.js Prisma Graphql Playground Html Graphql Playground Middleware Express +3

NVD GitHub

CVSS 3.1

7.4

EPSS

7.2%

CVE-2020-4038 npm

EPSS 7% CVSS 7.4

HIGH PATCH This Week

GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Node.js Prisma +5

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy