low3.3
CVE-2024-9283
ReLaXed Cross-site Scripting vulnerability
Impact
A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | relaxedjs | <= 0.2.5 | none recorded |
Affected products
| Product | Affected versions |
|---|---|
| RelaxedJS ReLaXed | before 0.2.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://drive.google.com/file/d/1Ll1dRwQds8987S-l5o2iJu4MQRG-p4-A/view?usp=sharing
- https://vuldb.com/?ctiid.278676
- https://vuldb.com/?id.278676
- https://vuldb.com/?submit.411185
- https://github.com/advisories/GHSA-gj3p-j74v-3x57
- https://nvd.nist.gov/vuln/detail/CVE-2024-9283