Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-53382

Опубликовано: 03 мар. 2025
Источник: nvd
CVSS3: 4.9
CVSS3: 5.4
EPSS Низкий

Описание

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:prismjs:prism:*:*:*:*:*:node.js:*:*
Версия до 1.29.0 (включая)

EPSS

Процентиль: 25%
0.00329
Низкий

4.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-94
CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2024-53382

CVSS3: 4.9
ubuntu
больше 1 года назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

redhat логотип

CVE-2024-53382

CVSS3: 4.9
redhat
больше 1 года назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

debian логотип

CVE-2024-53382

CVSS3: 4.9
debian
больше 1 года назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ...

github логотип

GHSA-x7hr-w5r2-h6wg

CVSS3: 4.9
github
больше 1 года назад

PrismJS DOM Clobbering vulnerability

EPSS

Процентиль: 25%
0.00329
Низкий

4.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-94
CWE-79