GHSA-9rwj-9j2h-fhvm

Toast UI Grid vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-23458

Packages

Ecosystem	Package	Affected	Fixed in
npm	tui-grid	< 4.21.3	4.21.3

Details

As written in the advisory (Markdown source, shown as plain text).

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-23458 advisory
https://github.com/nhn/tui.grid/commit/e9db5968675ae113c07efc091cce210f2b26854f web
https://github.com/nhn/tui.grid package
https://securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid advisory