What is GHSA-mrcj-5qxr-vhp2?

GHSA-mrcj-5qxr-vhp2 is a security advisory published by GitHub Security Advisories with Medium severity. angular-ui-notification Cross-site Scripting vulnerability

Which CVE IDs does GHSA-mrcj-5qxr-vhp2 cover?

GHSA-mrcj-5qxr-vhp2 covers the following CVE IDs: CVE-2023-34840. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mrcj-5qxr-vhp2?

GHSA-mrcj-5qxr-vhp2 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-mrcj-5qxr-vhp2?

GHSA-mrcj-5qxr-vhp2 affects 1 product, including: npm/angular-ui-notification:\u003e= 0.1.0, \u003c= 0.3.6.

GHSA-mrcj-5qxr-vhp2MediumCVSS 6.1

angular-ui-notification Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

June 30, 2023

Last Modified

November 11, 2023

🔗 CVE IDs covered (1)

CVE-2023-34840 →

📋 Description

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.

🎯 Affected products1

npm/angular-ui-notification:>= 0.1.0, <= 0.3.6

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-34840
https://github.com/Xh4H/CVE-2023-34840
https://github.com/alexcrack/angular-ui-notification
http://alexcrack.com
https://github.com/advisories/GHSA-mrcj-5qxr-vhp2