tarteaucitron.js vulnerable to Cross-site Scripting

보통 5.4CVE-2023-3620 · GHSA-f44m-65h3-99vc · Published 11/07/2023 · updated 17/06/2026

요약

CVE-2023-3620은(는) tarteaucitron (tarteaucitron), tarteaucitronjs에 영향을 주는 보통 (CVSS 5.4) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.54%, 전체 취약점의 45.7%보다 높음.
조치: 1.13.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
tarteaucitron tarteaucitron	`< 1.13.1`	`1.13.1`
tarteaucitronjs npm	`< 1.13.1`	`1.13.1`

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.

NVD description

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.