Files
CVEs-PoC/2019/CVE-2019-12043.md
T
2024-05-26 14:27:05 +02:00

640 B

CVE-2019-12043

Description

In remarkable 1.7.1, lib/parser_inline.js mishandles URL filtering, which allows attackers to trigger XSS via unprintable characters, as demonstrated by a \x0ejavascript: URL.

POC

Reference

No PoCs from references.

Github