This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.
References
Link | Resource |
---|---|
https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90 | Patch Third Party Advisory |
https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497 | Third Party Advisory |
https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90 | Patch Third Party Advisory |
https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:37
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90 - Patch, Third Party Advisory | |
References | () https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497 - Third Party Advisory |
Information
Published : 2020-10-21 17:15
Updated : 2024-11-21 05:37
NVD link : CVE-2020-7750
Mitre link : CVE-2020-7750
CVE.ORG link : CVE-2020-7750
JSON object : View
Products Affected
mit
- scratch-svg-renderer
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')