What is GHSA-gj3p-j74v-3x57?

GHSA-gj3p-j74v-3x57 is a security advisory published by GitHub Security Advisories with Low severity. ReLaXed Cross-site Scripting vulnerability

Which CVE IDs does GHSA-gj3p-j74v-3x57 cover?

GHSA-gj3p-j74v-3x57 covers the following CVE IDs: CVE-2024-9283. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gj3p-j74v-3x57?

GHSA-gj3p-j74v-3x57 has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

Which products are affected by GHSA-gj3p-j74v-3x57?

GHSA-gj3p-j74v-3x57 affects 1 product, including: npm/relaxedjs:\u003c= 0.2.5.

GHSA-gj3p-j74v-3x57LowCVSS 3.3

ReLaXed Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

September 27, 2024

Last Modified

October 8, 2024

🔗 CVE IDs covered (1)

CVE-2024-9283 →

📋 Description

A vulnerability classified as problematic has been found in RelaxedJS ReLaXed up to 0.2.2. Affected is an unknown function of the component Pug to PDF Converter. The manipulation leads to cross site scripting. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

🎯 Affected products1

npm/relaxedjs:<= 0.2.5

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2024-9283
https://drive.google.com/file/d/1Ll1dRwQds8987S-l5o2iJu4MQRG-p4-A/view?usp=sharing
https://vuldb.com/?ctiid.278676
https://vuldb.com/?id.278676
https://vuldb.com/?submit.411185
https://github.com/advisories/GHSA-gj3p-j74v-3x57