CVE-2022-30241 - The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element

Back Back to CVE browser

MEDIUM

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element

Published May 4, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.71%

Description

The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

Affected products

Ecosystem	Package	Introduced	Fixed
npm	jquery.json-viewer	0	1.5.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5005
Advisory
https://github.com/abodelot/jquery.json-viewer/pull/26
x_refsource_MISCPatchThird Party Advisory
https://github.com/abodelot/jquery.json-viewer/releases/tag/v1.5.0
https://github.com/advisories/GHSA-qp2q-6h9j-jg2r
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-30241
https://www.npmjs.com/package/jquery.json-viewer
x_refsource_MISCProductThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5005		Advisory
https://github.com/abodelot/jquery.json-viewer/pull/26		x_refsource_MISCPatchThird Party Advisory
https://github.com/abodelot/jquery.json-viewer/releases/tag/v1.5.0
https://github.com/advisories/GHSA-qp2q-6h9j-jg2r		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-30241
https://www.npmjs.com/package/jquery.json-viewer		x_refsource_MISCProductThird Party Advisory