CVE-2017-16015

    Dashboard / Vulnerabilities / CVE-2017-16015

    CVE-2017-16015

    Published: 4 Jun 2018Last Modified: 8 Jul 2026

    Summary:

    Details: Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting

    References: https://nodesecurity.io/advisories/158, https://github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -78d8d3a5818d0586d8f54a9eecb09dd8ff4534f2

    Affected versions

    v1.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High