CVE-2021-23648

CVE-2021-23648 affects the package @braintree/sanitize-url prior to 6.0.0, which is vulnerable to Cross-site Scripting (XSS) due to improper sanitization in the sanitizeUrl function. This is supported by connected documents that list the vulnerability and the affected version range. The vulnerabi...

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

CVE-2021-23648: Improper Neutralization of Input During Web Page Generation

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...

Braintree sanitize-url 跨站脚本漏洞

Braintree sanitize-url is an open source URL cleanup from Braintree, Inc. A cross-site scripting vulnerability exists in versions prior to Braintree sanitize-url 6.0.0, which stems from a lack of user-supplied data and output data validation filtering in the sanitizeUrl function. An attacker coul...

PT-2022-9421 · Npm +4 · @Braintree/Sanitize-Url +4

Name of the Vulnerable Software and Affected Versions: @braintree/sanitize-url versions prior to 6.0.0 Description: The issue is related to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function. This allows for potential XSS attacks. Recommendations: For versions prior...

Cross-site Scripting (XSS)

Overview @braintree/sanitize-url is an A url sanitizer Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function. PoC: js const sanitizeUrl = require"@braintree/sanitize-url".sanitizeUrl forconst vector of...

U.S. Dept Of Defense: Reflected XSS

Description: Hi i found a XSS at a new IP Address ssl points to ███hostname https://███████/WebPuff5.4/Login?signIn=Sign%20In&password=g00dPa%24%24w0rD&url=login.jsp%27%22%26%25%3Cacx%3E%3CScRiPt%20%3Ealert9868%3C/ScRiPt%3E&username=tMtFQiRt References https://owasp.org/www-community/attacks/xss/...

PT-2015-5033

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.0a3 through 1.2.18 Description The issue arises from an incorrect regular expression used in the string sanitize url function, allowing remote attackers to conduct open redirect and phishing attacks. This can be achieved ...