CVE-2022-48345

Published: 24/02/2023 Updated: 02/03/2023

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 0

sanitize-url (aka @braintree/sanitize-url) prior to 6.0.2 allows XSS via HTML entities.

Vulnerable Product	Search on Vulmon	Subscribe to Product
paypal braintree\\/sanitize-url

Debian Bug report logs - #1032313 node-mermaid: CVE-2022-48345 Package: src:node-mermaid; Maintainer for src:node-mermaid is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 3 Mar 2023 15:54:01 UTC Severity: important Tags: ...

DescriptionA flaw was found in sanitize-url It does not correctly sanitize with colons, possibly leading to a Cross-site scripting riskA flaw was found in sanitize-url It does not correctly sanitize with colons, possibly leading to a Cross-site scripting risk ...

CWE-79 https://github.com/braintree/sanitize-url/commit/d4bdc89f1743fe3cdb7c3f24b06e4c875f349b0c https://github.com/braintree/sanitize-url/compare/v6.0.1...v6.0.2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032313 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-48345

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-48345

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect