CVE-2019-25084

A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is 9de0c57df81db1178e0e79431d462f6d9842742e. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216767.

• CWE-79

• https://github.com/sindresorhus/hide-files-on-github/commit/9de0c57df81db1178e0e79431d462f6d9842742ePatch, Third Party Advisory
• https://github.com/sindresorhus/hide-files-on-github/pull/73Patch, Third Party Advisory
• https://github.com/sindresorhus/hide-files-on-github/releases/tag/3.0.0Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216767Third Party Advisory
• https://vuldb.com/?id.216767Third Party Advisory
• https://github.com/sindresorhus/hide-files-on-github/commit/9de0c57df81db1178e0e79431d462f6d9842742ePatch, Third Party Advisory
• https://github.com/sindresorhus/hide-files-on-github/pull/73Patch, Third Party Advisory
• https://github.com/sindresorhus/hide-files-on-github/releases/tag/3.0.0Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216767Third Party Advisory
• https://vuldb.com/?id.216767Third Party Advisory

Published

Dec 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25079Rejected reason: This candidate is unused by its CNA.
• CVE-2019-2508Vulnerability in the Oracle VM VirtualBox component of Oracl…
• CVE-2019-25080Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25081Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25082Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25083Rejected reason: This candidate is unused by its CNA.
• CVE-2019-25085A vulnerability was found in GNOME gvdb. It has been classif…8.8
• CVE-2019-25086A vulnerability was found in IET-OU Open Media Player up to …5.4
• CVE-2019-25087A vulnerability was found in RamseyK httpserver. It has been…7.5
• CVE-2019-25088A vulnerability was found in ytti Oxidized Web. It has been …5.4
• CVE-2019-25089A vulnerability has been found in Morgawr Muon 0.1.1 and cla…7.5
• CVE-2019-2509Vulnerability in the Oracle VM VirtualBox component of Oracl…