6.1 Medium

CVE-2021-23398 All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter

Description

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output.

Affected products and versions

Product	Affected versions	Fixed in
react-bootstrap-table	Versions not published

Do you use react-bootstrap-table?

Track this CVE Watch react-bootstrap-table Check my SBOMs

www.cveye.io/en/cve/CVE-2021-23398

Timeline

Published June 24, 2021
Last modified September 17, 2024

References

snyk.io snyk.io
snyk.io snyk.io
github.com github.com
github.com github.com

Track this CVE