Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44475
HistoryNov 29, 2023 - 10:20 a.m.

Cross Site Scripting (XSS)

2023-11-2910:20:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
node.js
xss
webassembly
javascript
module
vulnerability
data access

6.6 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

nodejs is vulnerable to Cross Site Scripting (XSS). The vulnerability exists because maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to how a JavaScript module behaves.