Aller au contenu
Se connecter
6.5 Moyenne

CVE-2021-23824 This affects the package Crow before 0.3+4

Description

This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting (XSS) vulnerability, assuming an attacker can influence the value entered into the template. If the template is used to render user-generated content, this vulnerability may escalate to a persistent XSS vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Crow 0.3 premières → < 0.3+4 0.3+4

Autres CVE de Crow

Les 3 CVE de Crow →
CVE-2023-26142 All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build… 6.5 Moyenne CVE-2021-23514 This affects the package Crow before 0.3+4 6.5 Moyenne
Suivre cette CVE