TI-2020-17305 CVE-2020-28502 · GHSA-h4j5-c7cj-74xg
Arbitrary code injection in xmlhttprequest
Priority MEDIUM 43
This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl.
Xmlhttprequest Project
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Xmlhttprequest Project records in CISA KEVNo Xmlhttprequest Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record