CVE-2021-34364: XSS
First published: Wed Jun 09 2021(Updated: )
The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Refined-github Project Refined-github | <21.6.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-34364?
CVE-2021-34364 is a vulnerability in The Refined GitHub browser extension before version 21.6.8 that could allow XSS attacks through a link in a document.
How severe is CVE-2021-34364?
CVE-2021-34364 has a severity rating of 6.1 (medium).
How can the vulnerability be exploited?
The vulnerability can be exploited by sending a malicious link to a user with the vulnerable extension, which could lead to XSS attacks.
Which version of The Refined GitHub extension is affected?
Versions of The Refined GitHub extension up to version 21.6.8 are affected by CVE-2021-34364.
How can I fix CVE-2021-34364?
To fix CVE-2021-34364, users should update The Refined GitHub browser extension to version 21.6.8 or higher.
- collector/nvd-index
- vendor/refined-github project
- canonical/refined-github project refined-github