GHSA-vrv9-3x3w-ffxwMediumCVSS 6.1

node-red-dashboard vulnerable to Cross-site Scripting

Published
November 1, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2022-3783 →

📋 Description

node-red-dashboard contains a cross-site scripting vulnerability. This issue affects some unknown processing of the file components/ui-component/ui-component-ctrl.js of the component ui_text Format Handler. The attack may be initiated remotely. The issue is patched in version 3.2.0.

🎯 Affected products1

  • npm/node-red-dashboard:< 3.2.0

🔗 References (5)