Oval Definition:oval:com.ubuntu.bionic:def:201716010000
Revision Date:2018-05-29Version:1
Title:CVE-2017-16010 on Ubuntu 18.04 LTS (bionic) - medium.
Description:i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but is not. This vulnerability affects i18next 2.0.0 and later.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-16010
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND The 'libjs-i18next' package in bionic is affected and needs fixing.
  • BACK