CVE-2024-6783

Summary

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as Object.prototype.staticClass or Object.prototype.staticStyle to execute arbitrary JavaScript code.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/advisories/GHSA-g3ch-rx76-35fx
• https://www.herodevs.com/vulnerability-directory/cve-2024-6783—vue-client-side-xss

References

• https://www.herodevs.com/vulnerability-directory/cve-2024-6783

• ←Previous
• Next→