Description

CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.

Remediation

References

https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcf

https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2

https://github.com/gchq/CyberChef/issues/539

https://github.com/gchq/CyberChef/issues/544

Related Vulnerabilities

CVE-2019-10795 Vulnerability in npm package undefsafe

CVE-2022-25871 Vulnerability in npm package querymen

CVE-2021-23400 Vulnerability in npm package nodemailer

CVE-2020-16041 Vulnerability in npm package electron

CVE-2023-40814 Vulnerability in maven package org.opencrx:opencrx-core-models

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Patch Third Party Advisory Exploit Issue Tracking