Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Lyngai

#55030of 56,330
4Total CVSS
Vulnerabilities · 1
PT-2023-15928
4.0
2023-04-20
Mportuga · Eslint-Detailed-Reporter · CVE-2022-4942
**Name of the Vulnerable Software and Affected Versions** mportuga eslint-detailed-reporter versions up to 0.9.0 **Description** A vulnerability was found in the function `renderIssue` in the library lib/template-generator.js, which can lead to cross-site scripting when the `message` argument is manipulated. The attack may be launched remotely. **Recommendations** For mportuga eslint-detailed-reporter versions up to 0.9.0, apply a patch to fix this issue. As a temporary workaround, consider restricting the use of the `renderIssue` function in the lib/template-generator.js library until a patch is available. Avoid manipulating the `message` argument in the affected function to minimize the risk of exploitation.