Описание
DOMPurify Open Redirect vulnerability
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.
Пакеты
Наименование
dompurify
npm
Затронутые версииВерсия исправления
< 1.0.11
1.0.11
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 2 лет назад
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.
CVSS3: 6.1
nvd
больше 2 лет назад
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.
CVSS3: 6.1
debian
больше 2 лет назад
DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-targe ...