Description

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Remediation

References

https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff

https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87

Related Vulnerabilities

CVE-2023-26049 Vulnerability in maven package org.eclipse.jetty:jetty-server

CVE-2023-35146 Vulnerability in maven package org.jenkins.plugin.templateworkflows:template-workflows

CVE-2022-41935 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui

CVE-2021-23901 Vulnerability in maven package org.apache.nutch:nutch

CVE-2023-28709 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Exploit Third Party Advisory CWE-94