CVE-2024-6783 in vue
摘要
由 MITRE • 2024-07-23
A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.