mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-28 03:02:23 +02:00
756 B
756 B
CVE-2021-23648
Description
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
POC
Reference
- https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882
- https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882