GHSA-gj3p-j74v-3x57

ReLaXed Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Low CVE-2024-9283

Packages

Ecosystem	Package	Affected	Fixed in
npm	relaxedjs	<= 0.2.5	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2024-9283 advisory
https://drive.google.com/file/d/1Ll1dRwQds8987S-l5o2iJu4MQRG-p4-A/view?usp=sharing web
https://github.com/RelaxedJS/ReLaXed package
https://vuldb.com/?ctiid.278676 web
https://vuldb.com/?id.278676 web
https://vuldb.com/?submit.411185 web