Description
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
Remediation
References
https://github.com/gchq/CyberChef/commit/01f0625d6a177f9c5df9281f12a27c814c2d8bcf
https://github.com/gchq/CyberChef/compare/v8.31.1...v8.31.2
https://github.com/gchq/CyberChef/issues/539
https://github.com/gchq/CyberChef/issues/544
Related Vulnerabilities
CVE-2021-32640 Vulnerability in npm package ws
CVE-2016-4000 Vulnerability in maven package org.python:jython-standalone
CVE-2021-4305 Vulnerability in npm package robots-txt-guard
CVE-2023-27095 Vulnerability in maven package cn.hippo4j:hippo4j-core
CVE-2023-24789 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent