Beveiligingsadvies

CVE-2024-21535

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-15 05:00:03

Laatst bijgewerkt 2024-10-15 14:02:35

Toegewezen door snyk

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.

← Alle CVE's bekijken Bekijk op cve.org ↗