This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.
References
Link | Resource |
---|---|
https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90 | Patch Third Party Advisory |
https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-10-21 17:15
Updated : 2024-02-04 21:23
NVD link : CVE-2020-7750
Mitre link : CVE-2020-7750
CVE.ORG link : CVE-2020-7750
JSON object : View
Products Affected
mit
- scratch-svg-renderer
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')