CVE-2022-4414

Summary

Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ADP Enrichment

CVE Program Container

Additional References

• https://huntr.dev/bounties/131a41e5-c936-4c3f-84fc-e0e1f0e090b5
• https://github.com/nuxt/framework/commit/19a2cd14929ca9b55720cb81f71687830a9e59a4

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://huntr.dev/bounties/131a41e5-c936-4c3f-84fc-e0e1f0e090b5
• https://github.com/nuxt/framework/commit/19a2cd14929ca9b55720cb81f71687830a9e59a4

• ←Previous
• Next→