Description

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Remediation

References

https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff

https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87

Related Vulnerabilities

CVE-2022-2047 Vulnerability in maven package org.eclipse.jetty:jetty-http

CVE-2021-32730 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui

CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-plugins

CVE-2022-43435 Vulnerability in maven package org.jenkins-ci.plugins.plugin:fireline

CVE-2021-23341 Vulnerability in npm package prismjs

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Exploit Third Party Advisory