Cross-site Scripting (XSS) - DOM in nuxt/framework
CVE-2022-4414

6.1MEDIUM

Key Information:

Vendor

Nuxt

Status
Nuxt/framework
Vendor
CVE Published:
12 December 2022

What is CVE-2022-4414?

Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

Affected Version(s)

nuxt/framework < unspecified

References

https://huntr.dev/bounties/131a41e5-c936-4c3f-84fc-e0e1f0...
https://github.com/nuxt/framework/commit/19a2cd14929ca9b5...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

CVSS V3.0

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.