PT-2023-24769 · Npm · @Udecode/Plate-Link

Oliverwales · Published 2023-06-09 · Updated 2023-06-21 · CVE-2023-34245

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions @udecode/plate-link versions prior to 20.0.0

Description The issue arises from the lack of URL sanitization in affected versions of the link plugin and link UI component, allowing links with JavaScript URLs to be inserted into the Plate editor. This can occur through various means, including opening or pasting malicious content. The introduction of an allowedSchemes option in version 20.0.0 resolves this issue by only allowing specific URL schemes (http, https, mailto, tel) to be rendered to the DOM.

Recommendations For versions prior to 20.0.0, upgrade to version 20.0.0 to resolve the issue. If unable to upgrade, override the LinkElement and PlateFloatingLink components with implementations that explicitly check the URL scheme before rendering any anchor elements.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-34245

GHSA-4882-HXPR-HRVM

Affected Products

@Udecode/Plate-Link

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34245.json · Exploit
• https://github.com/udecode/plate/commit/93dd5712854660874900ae12e4d8e6ff28089eb7 · Patch
• https://github.com/udecode/plate/security/advisories/GHSA-4882-hxpr-hrvm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34245 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34245 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4882-hxpr-hrvm · Vendor Advisory
• https://github.com/udecode/plate/pull/2240 · Note
• https://github.com/udecode/plate · Note
• https://t.me/cvenotify/52815 · Telegram Post
• https://t.me/cvenotify/52068 · Telegram Post