49 matches found
Design/Logic Flaw
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
UBUNTU-CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
Braintree sanitize-url 跨站脚本漏洞
Braintree sanitize-url is an open source URL cleanup from Braintree USA. A security vulnerability exists in Braintree sanitize-url prior to version 6.0.2, which stems from allowing XSS attacks via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
PT-2023-15721
Name of the Vulnerable Software and Affected Versions sanitize-url aka @braintree/sanitize-url versions prior to 6.0.2 Description The issue allows XSS via HTML entities. Recommendations For versions prior to 6.0.2, update to version 6.0.2 or later to resolve the issue...
CVE-2022-48345
CVE-2022-48345 affects sanitize-url (aka @braintree/sanitize-url) before 6.0.2, allowing XSS via HTML entities. Public references show fixes moving to 6.0.2+ (e.g., commit and release notes comparing 6.0.1 → 6.0.2). Remediation: upgrade to 6.0.2 or later.
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
CVE-2022-48345: Improper Neutralization of Input During Web Page Generation
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
sanitize-url: XSS due to improper sanitization in sanitizeUrl function
A flaw was found in sanitize-url due to improper sanitization in the sanitizeUrl function. This issue causes vulnerability to Cross-site Scripting in sanitize-url...
sanitize-url: XSS due to improper sanitization in sanitizeUrl function
A flaw was found in sanitize-url due to improper sanitization in the sanitizeUrl function. This issue causes vulnerability to Cross-site Scripting in sanitize-url...
Braintree sanitize-url cross-site scripting vulnerability
Braintree sanitize-url is an open source URL cleanup from Braintree, Inc. A cross-site scripting vulnerability exists in versions prior to Braintree sanitize-url 6.0.0, which stems from a lack of user-supplied data and output data validation filtering in the sanitizeUrl function. An attacker coul...
Cross-site Scripting (XSS)
@braintree/sanitize-url is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validating HTML encoding...
GHSA-HQQ7-2Q2V-82XQ Cross-site Scripting in sanitize-url
The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function...
CVE-2021-23648
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...