Mustache.js Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Mustache.js Project records in CISA KEV

No Mustache.js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mustache.js 1 record LOW

Records

1 record

TI-2015-07292 CVE-2015-8862 · GHSA-w3w8-37jv-2c58

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site…

LOW 31

mustache package before 2.2.1 for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging a template with an attribute that is not quoted.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01655 Published 2017-01-23 Fixed in 2.2.1 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0