What is CVE-2020-7691?

CVE-2020-7691 is a medium-severity vulnerability; its CVE record was published on July 6, 2020. In all versions of the package jspdf, it is possible to use \u003c\u003cscript\u003escript\u003e in order to go over the filtering regex.

When was CVE-2020-7691 made public?

CVE-2020-7691 was made public on July 6, 2020: that is the date its CVE record's CNA, Snyk, gives for when the vulnerability was made public. The CVE record itself was published on July 6, 2020. EchelonGraph's copy of the record carries a last-modified date of November 21, 2024; the record at its source may have been updated since.

Is CVE-2020-7691 actively exploited?

CVE-2020-7691 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 1.6% probability of exploitation in the next 30 days (75th percentile of EPSS-scored CVEs).

What is the CVSS score of CVE-2020-7691?

CVE-2020-7691 has a CVSS v3 base score of 6.3 (NVD).

How do I remediate CVE-2020-7691?

A fix for CVE-2020-7691 is available: update to the fixed version the vendor names in its advisory.

CVE-2020-7691

MEDIUMNVD 6.36.3Trending — 3 sources updated this week

Also known asEUVD-2021-0922 (ENISA EUVD) · GHSA-3q6f-8grx-pr4v (GitHub Security Advisories)Source: ENISA EUVD

6.3EG

EchelonGraph verdictMonitorRemediate within your standard update timelines (the SSVC decision on this page).

Lower severity and no public exploit yet

CISA-KEV: Not listedEPSS PROB: 1.6%CVSS: 6.3Exploit: None knownExposed services: Not assessed

A fix is available — apply it.

In all versions of the package jspdf, it is possible to use