CVE-2021-23648

Published March 16th, 2022

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

braintree/sanitize-url

GitHub

367