medium6.1
CVE-2022-0437
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
Impact
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Karma Project | Karma | before 6.3.14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
- https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885
- https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
- https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885