En resumen
- CVE-2021-23648 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a braintree/sanitize-url (paypal), @braintree/sanitize-url.
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 73.0% de las vulnerabilidades.
- Solución: actualizar a 6.0.0 o posterior.
Description
The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting (XSS) due to improper sanitization in the sanitizeUrl function.
NVD description
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
Más vulnerabilidades de braintree/sanitize-url
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free