Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lyngai

#43609of 53,630
6.1Total CVSS
Vulnerabilities · 1
PT-2023-15928
6.1
2023-04-20
Mportuga · Eslint-Detailed-Reporter · CVE-2022-4942
**Name of the Vulnerable Software and Affected Versions** mportuga eslint-detailed-reporter versions up to 0.9.0 **Description** A vulnerability was found in the function `renderIssue` in the library lib/template-generator.js, which can lead to cross-site scripting when the `message` argument is manipulated. The attack may be launched remotely. **Recommendations** For mportuga eslint-detailed-reporter versions up to 0.9.0, apply a patch to fix this issue. As a temporary workaround, consider restricting the use of the `renderIssue` function in the lib/template-generator.js library until a patch is available. Avoid manipulating the `message` argument in the affected function to minimize the risk of exploitation.