Lucene search

@huntrdevCVE-2022-4414

HistoryDec 12, 2022 - 12:15 a.m.

CVE-2022-4414

2022-12-1200:15:10

CWE-79

@huntrdev

web.nvd.nist.gov

cve

2022

4414

cross-site scripting

xss

dom

github

repository

nuxt

framework

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

26.4%

JSON

Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Affected configurations

Nvd

Node

nuxtframeworkMatch3.0.0rc1

nuxtframeworkMatch3.0.0rc10

nuxtframeworkMatch3.0.0rc11

nuxtframeworkMatch3.0.0rc12

nuxtframeworkMatch3.0.0rc2

nuxtframeworkMatch3.0.0rc3

nuxtframeworkMatch3.0.0rc4

nuxtframeworkMatch3.0.0rc5

nuxtframeworkMatch3.0.0rc6

nuxtframeworkMatch3.0.0rc7

nuxtframeworkMatch3.0.0rc8

nuxtframeworkMatch3.0.0rc9

VendorProductVersionCPE
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc1:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc10:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc11:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc12:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc2:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc3:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc4:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc5:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc6:*:*:*:*:*:*
nuxtframework3.0.0cpe:2.3:a:nuxt:framework:3.0.0:rc7:*:*:*:*:*:*

Vendor	Product	Version	CPE
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc1::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc10::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc11::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc12::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc2::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc3::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc4::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc5::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc6::::::
nuxt	framework	3.0.0	cpe:2.3:a:nuxt:framework:3.0.0:rc7::::::

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "vendor": "nuxt",
    "product": "nuxt/framework",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v3.0.0-rc.13",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]