CVE:CVE-2021-23414
CNNVD:CNNVD-202107-2117
video.js是一个应用软件。一个专为 HTML5 世界构建的网络视频播放器。
video.js存在跨站脚本漏洞，该漏洞允许绕过HTML转义并执行任意代码。
solution:Upgrade videojs video.js to a higher version than 7.14.3,and avoid the version (,7.14.3); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37