Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-53382

Опубликовано: 03 мар. 2025
Источник: nvd
CVSS3: 4.9
CVSS3: 5.4
EPSS Низкий

Описание

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:prismjs:prism:*:*:*:*:*:node.js:*:*
Версия до 1.29.0 (включая)

EPSS

Процентиль: 25%
0.00083
Низкий

4.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-94
CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2024-53382

CVSS3: 4.9
ubuntu
10 месяцев назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

redhat логотип

CVE-2024-53382

CVSS3: 4.9
redhat
10 месяцев назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

debian логотип

CVE-2024-53382

CVSS3: 4.9
debian
10 месяцев назад

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resulta ...

github логотип

GHSA-x7hr-w5r2-h6wg

CVSS3: 4.9
github
10 месяцев назад

PrismJS DOM Clobbering vulnerability

EPSS

Процентиль: 25%
0.00083
Низкий

4.9 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-94
CWE-79