CVE-2021-23445
on github
Published
Severity
CVSS v3:
6.1 MEDIUM
CVSS v2:
4.3 MEDIUM
Description
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
References
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544
- https://github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1715376
- https://cdn.datatables.net/1.11.3/
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1715371
- https://lists.debian.org/debian-lts-announce/2023/08/msg00018.html
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:node.js:*:* | n/a | 1.11.3 | * |