Description

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2.

Remediation

References

CVE-2024-48910

Related Vulnerabilities

Oracle Database Server CVE-2009-1991 Vulnerability (CVE-2009-1991)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517)

WordPress Plugin GiveWP-Donation and Fundraising Platform Cross-Site Scripting (2.9.7)

Jetty Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2026-2332)

Oracle Application Server CVE-2006-0274 Vulnerability (CVE-2006-0274)

Severity

Critical

Classification

CVE-2024-48910 CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities