Lucene search
PRIOn knowledge basePRION:CVE-2021-23443HistorySep 21, 2021 - 5:15 p.m.
Type confusion
2021-09-2117:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
31.2%
This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.
Related
cve
cve
CVE-2021-23443
2021-09-21 17:15:09
osv
osv
CVE-2021-23443
2021-09-21 17:15:09
Cross-site Scripting in edge.js
2021-09-22 20:36:46
cvelist
cvelist
CVE-2021-23443 Cross-site Scripting (XSS)
2021-09-21 00:00:00
nvd
nvd
CVE-2021-23443
2021-09-21 17:15:09
veracode
veracode
Cross-Site Scripting (XSS)
2021-09-22 07:11:21
cnvd
cnvd
edge.js cross-site scripting vulnerability
2022-04-08 00:00:00
github
github
Cross-site Scripting in edge.js
2021-09-22 20:36:46