CVE-2018-3735CWE-79

CVE-2018-3735: vulnerability in HackerOne bracket-template node module

Published · Updated

Follow this CVE+ Monitor bracket-template node module+ Monitor bracket-template

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template
Affected products
HackerOne · bracket-template node module