Non notée
CVE-2021-22540 Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering
Description
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dart SDK 2.12 | premières → < 2.12.3 | 2.12.3 |
Autres CVE de Dart SDK
Les 4 CVE de Dart SDK →
CVE-2022-0451
Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin…
6.5
Moyenne
CVE-2021-22567
Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be…
4.6
Moyenne
CVE-2021-22568
When using the dart pub publish command to publish a package to a third-party package server, the request would be…
8.8
Élevée