Lucene search
PRIOn knowledge basePRION:CVE-2023-41049HistorySep 01, 2023 - 8:15 p.m.
Input validation
2023-09-0120:15:00
PRIOn knowledge base
www.prio-n.com
3
npm library
single sign on
authentication
vulnerability
patch
upgrade
0.0005 Low
EPSS
Percentile
17.0%
@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are advised to upgrade. Users unable to upgrade should limit untrusted user input to the init function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| single_sign_on_client | lt | 0.1.0 |
Related
veracode
veracode
Cross Site Scripting (XSS)
2023-09-05 07:31:50
github
github
cve
cve
CVE-2023-41049
2023-09-01 20:15:07
osv
osv
CVE-2023-41049
2023-09-01 20:15:07
nvd
nvd
CVE-2023-41049
2023-09-01 20:15:07
cvelist
cvelist