Linux Distros Unpatched Vulnerability : CVE-2022-48345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities. CVE-2022-48345 Note that Nessus relies on the presence of the package as...

Security Bulletin: Vulnerability in sanitize-url affects IBM Process Mining . CVE-2022-48345

Summary There is a vulnerability in sanitize-url that could allow a remote attacker to execute script in a victim's Web browser due to cross-site scripting. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability...

@apa512/stream-chat-react (>=0.0.0-development, <=0.0.5), @brail/web (>=0.2.0-alpha.10, <=0.3.1-canary.1) +38 more potentially affected by CVE-2022-48345 via @braintree/sanitize-url (6.0.0)

@braintree/sanitize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @braintree/sanitize-url and may be impacted: - @apa512/stream-chat-react =0.0.0-development, =0.2.0-alpha.10, =1.0.0, =0.3.0, =8.4.7, =0.1.10, =8.4.7, =8.4.7,...

CVE-2022-48345

CVE-2022-48345 affects sanitize-url (aka @braintree/sanitize-url) before 6.0.2, allowing XSS via HTML entities. Public references show fixes moving to 6.0.2+ (e.g., commit and release notes comparing 6.0.1 → 6.0.2). Remediation: upgrade to 6.0.2 or later.