Cross-site Scripting (XSS)

2023-04-2017:12:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerability

setclipboardtext api

libraylib.so

attack

javascript

0.001 Low

EPSS

Percentile

46.6%

JSON

libraylib.so is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in rcore.c because the SetClipboardText API does not properly escape the ' character which allows an attacker to inject and execute arbitrary JavaScript.

CPENameOperatorVersion
libraylib.sole4.0.0
libraylib.sole4.0.0

CPE	Name	Operator	Version
	libraylib.so	le	4.0.0
	libraylib.so	le	4.0.0

References

github.com/advisories/GHSA-62mx-2499-jrm4

github.com/raysan5/raylib/commit/b436c8d7e5346a241b00511a11585936895d959d

github.com/raysan5/raylib/issues/2954

github.com/raysan5/raylib/releases/tag/4.5.0

0.001 Low

EPSS

Percentile

46.6%

JSON

Related for VERACODE:40237