Lucene search
GoogleOSV:CVE-2021-23784HistoryNov 03, 2021 - 6:15 p.m.
CVE-2021-23784
2021-11-0318:15:08
Google
osv.dev
3
cve-2021-23784; tempura; cross-site scripting
This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.
Related
veracode
veracode
Cross-Site Scripting (XSS)
2021-11-05 08:40:58
nvd
nvd
CVE-2021-23784
2021-11-03 18:15:08
osv
osv
Cross-site Scripting in tempura
2021-11-08 17:50:10
cvelist
cvelist
CVE-2021-23784 Cross-site Scripting (XSS)
2021-11-03 17:20:42
github
github
Cross-site Scripting in tempura
2021-11-08 17:50:10
cve
cve
CVE-2021-23784
2021-11-03 18:15:08
prion
prion
Cross site scripting
2021-11-03 18:15:00