CVE-2023-26123

CVE-2023-26123 affects the raysan5/raylib package prior to 4.5.0. In web builds (PLATFORM_WEB) the SetClipboardText API fails to escape the single quote, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten_run_script, constituting a Cross-...

CVE-2023-26123

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting XSS such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscriptenrunscript...

CVE-2023-26123: Improper Neutralization of Input During Web Page Generation

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting XSS such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscriptenrunscript...

PT-2023-20504 · Raysan5 · Raylib

Name of the Vulnerable Software and Affected Versions: raysan5/raylib versions prior to 4.5.0 Description: The issue is related to Cross-site Scripting XSS where the SetClipboardText API does not properly escape the character, allowing attacker-controlled input to break out of the string and...

raylib 跨站脚本漏洞

raylib is an easy-to-use library for raysan5 personal developers to enjoy video game programming. A security vulnerability exists in raysan5 raylib versions prior to 4.5.0, which stems from a failure of the SetClipboardText API to properly escape characters, which can be exploited by an attacker ...