CVE-2024-48910

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.
CVSS

No CVSS.

Configurations

No configuration.

History

31 Oct 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-31 15:15

Updated : 2024-11-01 12:57


NVD link : CVE-2024-48910

Mitre link : CVE-2024-48910


JSON object : View

Products Affected

No product.

CWE
CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')