Most recent entries from all

cnvd-2018-14555

EUVD-2026-166906

fkie_cve-2017-16018

Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.

GHSA-qw3g-35hc-fcrh — Cross-Site Scripting (XSS) in restify

Affected: npm: restify

Affected versions of `restify` are susceptible to a cross-site scripting vulnerability when using URL encoded script tags in a non-existent URL.

## Proof of Concept:

Request ``` https://localhost:3000/no5_such3_file7.pl?%22%3E%3Cscript%3Ealert(73541);%3C/script%3E ```

Will be included in response:

```<script>alert(73541);</script>```

## Recommendation

Update to version 4.1.0 or later.

Most recent entries from all

cnvd-2018-14555

EUVD-2026-166906

fkie_cve-2017-16018

GHSA-qw3g-35hc-fcrh — Cross-Site Scripting (XSS) in restify

gsd-2017-16018