CVE-2024-6783 in vueinformazioni

Riassunto

di MITRE • 23/07/2024

A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsabile

HeroDevs

Prenotare

16/07/2024

Divulgazione

23/07/2024

Moderazione

accettato

CPE

pronto

EPSS

0.00506

KEV

no

Attività

molto basso

Fonti

Interested in the pricing of exploits?

See the underground prices here!