The vulnerability of the excalidraw package on the Node.js software platform arises from the lack of measures to sanitize input data, allowing attackers to execute XSS attacks.

The vulnerability of the excalidraw package on the Node.js software platform is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +54 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.2-6546-3398d86)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.1.8, =0.1.72 and more Source cves: CVE-2023-26140 Source advisory: OSV:GHSA-V7V8-GJV7-FFMR...

GHSA-FR9G-2M2H-C27J Duplicate Advisory: @excalidraw/excalidraw Cross-site Scripting vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v7v8-gjv7-ffmr. This link is maintained to preserve external references. Original Description Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded lin...

CVE-2023-26140

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

Cross site scripting

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

CVE-2023-26140

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

CVE-2023-26140

Versions of the package @excalidraw/excalidraw from 0.0.0 are vulnerable to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization...

CVE-2023-26140

CVE-2023-26140 : The npm package @excalidraw/excalidraw (version 0.0.0) is vulnerable to Cross-site Scripting (XSS) due to improper input sanitization of linked URLs in whiteboard objects. Root cause: insufficient sanitization on URLs attached to canvas elements. Impact: XSS with potential user i...

excalidraw 跨站脚本漏洞

excalidraw is a software application. Virtual Whiteboard Sketch Hand Drawing A security vulnerability exists in excalidraw that stems from improper input cleanup and is susceptible to cross-site scripting XSS attacks...

PT-2023-8844 · Npm · @Excalidraw/Excalidraw

Name of the Vulnerable Software and Affected Versions: @excalidraw/excalidraw versions 0.0.0 through 0.15.2 Description: The issue is related to Cross-site Scripting XSS via embedded links in whiteboard objects due to improper input sanitization. This allows a remote attacker to conduct an XSS...

@blocklet/discuss-kit (>=1.0.8, <=2.0.172), @blocklet/discuss-kit-post (>=1.6.254, <=2.0.172) +62 more potentially affected by CVE-2023-26140 via @excalidraw/excalidraw (>=0.4.3, <=0.15.3)

@excalidraw/excalidraw NPM version =0.4.3, =1.0.8, =1.6.254, =1.0.8, =0.0.2, =0.0.6, =1.0.0, =0.0.1, =0.0.1, =0.0.2, =30.1.2, =0.0.0, =0.0.5, =0.0.32 and more Source cves: CVE-2023-26140 Source advisory: SNYK:JS-EXCALIDRAWEXCALIDRAW-5841658...