DOMPurify Open Redirect vulnerability

MEDIO 6.1CVE-2019-25155 · GHSA-8hgg-xxm5-3873 · Published 07/11/2023 · updated 17/06/2026

En resumen

CVE-2019-25155 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a dompurify (cure53), dompurify.
Probabilidad de explotación en los próximos 30 días (EPSS): 0.58%, mayor que el 47.5% de las vulnerabilidades.
Solución: actualizar a 1.0.11 o posterior.

Package	Affected versions	Patched versions
dompurify cure53	`< 1.0.11`	`1.0.11`
dompurify npm	`< 1.0.11`	`1.0.11`

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

NVD description

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 1.0.11

1.0.11

npm

< 1.0.11

1.0.11

Description

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

NVD description

DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.

Más vulnerabilidades de dompurify

Ver todo →