CVEs-PoC/2021/CVE-2021-23648.md

CVE-2021-23648

Description

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

POC

Reference

• https://github.com/braintree/sanitize-url/pull/40/commits/e5afda45d9833682b705f73fc2c1265d34832183
• https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882

Github

• https://github.com/ARPSyndicate/cvemon