Overview
- Description
- DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.
- Source
- security-advisories@github.com
- NVD status
- Awaiting Analysis
Risk scores
CVSS 3.1
- Type
- Secondary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity
- CRITICAL
Weaknesses
- security-advisories@github.com
- CWE-1321
Social media
- Hype score
- Not currently trending
CVE-2024-48910、DOMPurifyのプロトタイプ汚染なんだけど全然話題になってない気がする https://t.co/SiLXmlAfHC
@sksec_
3 Nov 2024
390 Impressions
0 Retweets
4 Likes
3 Bookmarks
1 Reply
0 Quotes
CVE-2024-48910 Prototype Pollution Vulnerability Patched in DOMPurify 2.4.2 DOM... https://t.co/v2y6UraiQ5 Customizable Vulnerability Alerts: https://t.co/U7998fz7yk
@VulmonFeeds
31 Oct 2024
41 Impressions
1 Retweet
1 Like
1 Bookmark
0 Replies
0 Quotes
CVE-2024-48910 DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixe… https://t.co/8nodZwGIW6
@CVEnew
31 Oct 2024
393 Impressions
1 Retweet
1 Like
1 Bookmark
0 Replies
0 Quotes
[CVE-2024-48910: CRITICAL] DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.#cybersecurity,#vulnerability https://t.co/ZE9jyPKi03 https://t.co/vrllUgW97
@CveFindCom
31 Oct 2024
43 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes