CVE-2020-8823

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/theyiyibest/Reflected-XSS-on-SockJSExploit, Patch, Third Party Advisory
https://github.com/theyiyibest/Reflected-XSS-on-SockJS/issues/1Third Party Advisory
https://snyk.io/vuln/SNYK-JS-SOCKJS-548397Third Party Advisory
https://www.sockjs.orgVendor Advisory
https://github.com/theyiyibest/Reflected-XSS-on-SockJSExploit, Patch, Third Party Advisory
https://github.com/theyiyibest/Reflected-XSS-on-SockJS/issues/1Third Party Advisory
https://snyk.io/vuln/SNYK-JS-SOCKJS-548397Third Party Advisory
https://www.sockjs.orgVendor Advisory

Timeline

Published: Feb 10, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-88245.4Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.CVE-2020-88255.4index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.CVE-2020-88267.5As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever CVE-2020-88277.5As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce mea CVE-2020-88288.8As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster or logs, this issue c CVE-2020-88298.8CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis.CVE-2020-88308.8CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA CVE-2020-88315.5Apport creates a world writable lock file with root ownership in the world writable /var/lock/apport directory. If the apport/ directory doe CVE-2020-88325.5The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context swi CVE-2020-88334.7Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation CVE-2020-88346.5KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{sa CVE-2020-88357.8In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit opera