Vulnerability Description
docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from server-side .md files. Due to lack of validation here, it is possible to provide external URLs after the /#/ (domain.com/#//attacker.com) and render arbitrary JavaScript/HTML inside docsify page.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Docsifyjs | Docsify | < 4.11.4 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/158515/Docsify.js-4.11.4-Cross-Site-ScriptiExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.ExploitThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Feb/71Mailing ListThird Party Advisory
- https://github.com/docsifyjs/docsify/issues/1126Third Party Advisory
- https://github.com/docsifyjs/docsify/pull/1128PatchThird Party Advisory
- https://snyk.io/vuln/SNYK-JS-DOCSIFY-567099Third Party Advisory
- http://packetstormsecurity.com/files/158515/Docsify.js-4.11.4-Cross-Site-ScriptiExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.ExploitThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Feb/71Mailing ListThird Party Advisory
- https://github.com/docsifyjs/docsify/issues/1126Third Party Advisory
- https://github.com/docsifyjs/docsify/pull/1128PatchThird Party Advisory
- https://snyk.io/vuln/SNYK-JS-DOCSIFY-567099Third Party Advisory
FAQ
What is CVE-2020-7680?
CVE-2020-7680 is a vulnerability with a CVSS score of 6.1 (MEDIUM). docsify prior to 4.11.4 is susceptible to Cross-site Scripting (XSS). Docsify.js uses fragment identifiers (parameters after # sign) to load resources from server-side .md files. Due to lack of valida...
How severe is CVE-2020-7680?
CVE-2020-7680 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7680?
Check the references section above for vendor advisories and patch information. Affected products include: Docsifyjs Docsify.