Beveiligingsadvies

CVE-2024-43370

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-08-15 23:44:47

Laatst bijgewerkt 2024-08-16 15:10:20

Toegewezen door GitHub_M

CVSS-score 7.2

Status PUBLISHED

Beschrijving

gettext.js is a GNU gettext port for node and the browser. There is a cross-site scripting (XSS) injection if `.po` dictionary definition files are corrupted. This vulnerability has been patched in version 2.0.3. As a workaround, control the origin of the definition catalog to prevent the use of this flaw in the definition of plural forms.

← Alle CVE's bekijken Bekijk op cve.org ↗