Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-24540

Опубликовано: 11 мая 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

РелизСтатусПримечание
bionic

DNE

devel

not-affected

1.19.9-1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

kinetic

released

1.19.2-1ubuntu1.1
lunar

released

1.19.8-1ubuntu0.1
trusty

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

1.20.4-1
esm-infra/focal

DNE

focal was not-affected [1.20.3-1ubuntu0.1~20.04]
focal

not-affected

1.20.3-1ubuntu0.1~20.04
jammy

not-affected

1.20.3-1ubuntu0.1~22.04
kinetic

DNE

lunar

released

1.20.3-1ubuntu0.1
trusty

ignored

end of standard support
upstream

released

1.20.4-1
xenial

ignored

end of standard support

Показывать по

EPSS

Процентиль: 48%
0.00243
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
около 2 лет назад

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

CVSS3: 9.8
nvd
около 2 лет назад

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

CVSS3: 9.8
debian
около 2 лет назад

Not all valid JavaScript whitespace characters are considered to be wh ...

CVSS3: 9.8
github
около 2 лет назад

Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.

oracle-oval
около 2 лет назад

ELSA-2023-3319: go-toolset:ol8 security update (IMPORTANT)

EPSS

Процентиль: 48%
0.00243
Низкий

9.8 Critical

CVSS3

Уязвимость CVE-2023-24540