Xmlhttprequest Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xmlhttprequest Project records in CISA KEV

No Xmlhttprequest Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Xmlhttprequest · all components

TI-2020-17305 CVE-2020-28502 · GHSA-h4j5-c7cj-74xg

MEDIUM 43

This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04629 Published 2021-03-05 Fixed in 1.7.0, 1.6.2 CWE-94