Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2024/09/23 4:46 p.m.17 views

CVE-2024-47068

A flaw was found in the Rollup module bundler for JavaScript. Certain versions are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta such as import.meta.url in the cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting XS...

6.4CVSS5.4AI score0.02786EPSS
Exploits1References8
OSV
OSV
added 2024/09/23 4:15 p.m.0 views

UBUNTU-CVE-2024-47068

Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta e.g., import.meta.url in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting...

6.1CVSS6.6AI score0.02786EPSS
Exploits1References9
Debian CVE
Debian CVE
added 2024/09/23 3:26 p.m.14 views

CVE-2024-47068

Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta e.g., import.meta.url in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting...

6.1CVSS5.2AI score0.02786EPSS
Exploits1
Cvelist
Cvelist
added 2024/09/23 3:26 p.m.39 views

CVE-2024-47068 DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta e.g., import.meta.url in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting...

6.1CVSS0.02786EPSS
Exploits1References5
OSV
OSV
added 2024/09/23 3:26 p.m.14 views

CVE-2024-47068 DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from import.meta e.g., import.meta.url in cjs/umd/iife format. The DOM Clobbering gadget can lead to cross-site scripting...

6.1CVSS6.5AI score0.02786EPSS
Exploits1References7
Rows per page
Query Builder