原始 OSV JSON
{
"id": "GHSA-72fv-qgj6-2w2p",
"aliases": [
"CVE-2015-9286"
],
"details": "Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.",
"summary": "Cross-site Scripting in NodeBB",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.8.2"
}
]
}
],
"package": {
"name": "nodebb",
"ecosystem": "npm"
}
}
],
"modified": "2021-08-03T21:27:01Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"published": "2019-05-01T18:37:08Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-9286",
"type": "ADVISORY"
},
{
"url": "https://github.com/NodeBB/NodeBB/pull/3371",
"type": "WEB"
},
{
"url": "https://github.com/NodeBB/NodeBB/compare/56b79a9...4de7529",
"type": "WEB"
},
{
"url": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:32625",
"type": "WEB"
},
{
"url": "https://www.vulnerability-lab.com/get_content.php?id=1608",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": "2019-04-30T14:29:00Z",
"github_reviewed_at": "2019-05-01T18:20:32Z"
}
}