CVE-2022-4942
Low
Description
A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The patch is identified as 505c190efd4905990db6207863bdcbd9b1d7e1bd. It is recommended to apply a patch to fix this issue. VDB-226310 is the identifier assigned to this vulnerability.
SeverityLow
CVSS3.5
Exploit probability—
ProductEslint-detailed-reporter
PublishedApr 20, 2023
First seenApr 20, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eslint-detailed-reporter_project eslint-detailed-reporter | v ≤ 0.9.0 | — |
| eslint-detailed-reporternpm | v ≤ 0.9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.