CVE-2017-1000076.json

{"data_version": "4.0","references": {"reference_data": [{"url": "https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)"}]},"description": {"description_data": [{"lang": "eng","value": "websocket.org AMQP Messaging Demo for Javascript version 0-9-1 is vulnerable to a XSS attack in the exchange textbox component under both \"Publish a message to an exchange\" and \"Publish as a transaction\" resulting in the disclosure of the users session cookie"}]},"data_type": "CVE","affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "9/1/2000"}]},"product_name": "ampq-091-messaging-javascript"}]},"vendor_name": "websocket.org"}]}},"CVE_data_meta": {"DATE_ASSIGNED": "2017-05-06T20:43:28.325859","ID": "CVE-2017-1000076","ASSIGNER": "kurt@seifried.org","REQUESTER": "ashutoss@andrew.cmu.edu"},"data_format": "MITRE","problemtype": {"problemtype_data": [{"description": [{"lang": "eng","value": "Cross Site Scripting (XSS)"}]}]}}