Knockout.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-14862 - Vulnerability Database

Knockout.js

Knockout.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-14862

Medium

Reference: CVE-2019-14862

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-14862

Title: Knockout.js Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

There is a vulnerability in knockout before version 3.5.0-beta where after escaping the context of the web application the web application delivers data to its users along with other trusted dynamic content without validating it.