mavo DOM Clobbering vulnerability

Description

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 0.3.2

References

• GHSA-3mf5-r4hg-hfx9
• CVE-2024-53388
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Firebase vulnerable to CRSF attack - CVE-2024-4128
• Prototype Pollution in protobufjs - CVE-2022-25878
• Cross-Site Scripting in highcharts - Vulnerability
• PostCSS line return parsing error - CVE-2023-44270

Tags:

npm

mavo