CVE-2023-3620

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tarteaucitron:tarteaucitron:*:*:*:*:*:node.js:*:*

History

18 Jul 2023, 16:05

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.4
CPE cpe:2.3:a:tarteaucitron:tarteaucitron:*:*:*:*:*:node.js:*:*
References (MISC) https://huntr.dev/bounties/a0fd0671-f051-4d41-8928-9b19819084c9 - (MISC) https://huntr.dev/bounties/a0fd0671-f051-4d41-8928-9b19819084c9 - Exploit, Patch
References (MISC) https://github.com/amauric/tarteaucitron.js/commit/c4c2fcf2b2212ce968bdcae145bb74283c441e5f - (MISC) https://github.com/amauric/tarteaucitron.js/commit/c4c2fcf2b2212ce968bdcae145bb74283c441e5f - Exploit, Patch
First Time Tarteaucitron tarteaucitron
Tarteaucitron

11 Jul 2023, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-11 15:15

Updated : 2024-02-28 20:13


NVD link : CVE-2023-3620

Mitre link : CVE-2023-3620

CVE.ORG link : CVE-2023-3620


JSON object : View

Products Affected

tarteaucitron

  • tarteaucitron
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')