25175 matches found
GHSA-RJJV-87MX-6X3H
creationtimestamp| type| source ---|---|--- 2024-11-25 19:18:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113545203266583667...
CVE-2024-53262 Unescaped error message included on error page in SvelteKit
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html template for errors contains placeholders that are replaced without escaping the content first. error.html is the page that is rendered when everything else fails. It can contai...
CVE-2024-53262
CVE-2024-53262 affects SvelteKit where the static error.html template renders placeholders for HTTP status and error.message without escaping. This can allow an attacker-provided error.message to inject content into the error page, yielding a template XSS risk for applications that include user i...
CVE-2024-52811
creationtimestamp| type| source ---|---|--- 2024-11-25 18:57:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113545122233349276...
GHSA-4GMV-GF46-R4G5
creationtimestamp| type| source ---|---|--- 2024-11-25 18:57:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113545122233349276...
CVE-2024-52529
creationtimestamp| type| source ---|---|--- 2024-11-25 18:50:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113545092265515508...
GHSA-QQWR-J9MM-FHW6
creationtimestamp| type| source ---|---|--- 2024-11-25 18:50:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113545092236832008...
CVE-2024-53599
creationtimestamp| type| source ---|---|--- 2024-11-25 18:40:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113545053507233339...
CVE-2023-26280
creationtimestamp| type| source ---|---|--- 2024-11-25 15:59:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113544420719052499...
GHSA-MH2X-FCQH-FMQV @sveltejs/kit has unescaped error message included on error page
Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...
@sveltejs/kit has unescaped error message included on error page
Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...
CVE-2024-11671
creationtimestamp| type| source ---|---|--- 2024-11-25 14:52:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113544158812056390...
CVE-2024-11403
creationtimestamp| type| source ---|---|--- 2024-11-25 13:20:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113543793898596252...
CVE-2020-12491
creationtimestamp| type| source ---|---|--- 2024-11-25 10:13:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113543060322230778...
CVE-2022-33862
creationtimestamp| type| source ---|---|--- 2024-11-25 09:04:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113542787818624669...
CVE-2024-11660
creationtimestamp| type| source ---|---|--- 2024-11-25 07:10:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113542340948356866...
CVE-2024-6393
creationtimestamp| type| source ---|---|--- 2024-11-25 06:02:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113542072771632758...
CVE-2024-11483
creationtimestamp| type| source ---|---|--- 2024-11-25 04:00:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113541594212490605...