vulnerability

Red Hat: CVE-2021-23648: CVE-2021-23648 sanitize-url: XSS due to improper sanitization in sanitizeUrl function (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
2022-03-16
Added
2022-11-09
Modified
2025-03-11

Description

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

Solution(s)

redhat-upgrade-grafanaredhat-upgrade-grafana-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.