Kurz gesagt
- CVE-2021-23784 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in tempura (tempura project), tempura.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.3%, höher als bei 69.8% aller Schwachstellen.
- Abhilfe: auf 0.4.0 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| tempura | < 0.4.0
| 0.4.0
|
| tempura npm | < 0.4.0
| 0.4.0
|
Description
This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.
NVD description
This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free