Beveiligingsadvies

CVE-2022-25875

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-12 14:20:17

Laatst bijgewerkt 2024-09-17 04:14:01

Toegewezen door snyk

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.

← Alle CVE's bekijken Bekijk op cve.org ↗