CVE-2021-22540

Published April 22nd, 2021

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags.

dart-lang/sdk

The Dart SDK, including the VM, JS and Wasm compilers, analysis, core libraries, and more.

GitHub

11.2K