CVEs-PoC/2020/CVE-2020-7691.md

CVE-2020-7691

Description

In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-575255
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-575253
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-575254
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575252
• https://snyk.io/vuln/SNYK-JS-JSPDF-568273

Github

No PoCs found on GitHub currently.