CVE-2019-14862 REJECTED

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

EPSS 0.15% · 35.3th percentile

Risk Scores

EPSS Score
0.15%
35.3th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSnode-knockout0, 3.4.2-2

Timeline

References

Open in Interactive Console →