CLEANSTART-2024-NG49379

Dashboard / Vulnerabilities / CLEANSTART-2024-NG49379

CLEANSTART-2024-NG49379

Summary: attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy

Details: CVE-2022-31744 affects multiple packages. An attacker could have injected CSS into stylesheets accessible via internal URIs, such as resource:, and in doing so bypass a page's Content Security Policy. See references for individual vulnerability details.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-NG49379.json, https://osv.dev/vulnerability/CVE-2022-31744, https://nvd.nist.gov/vuln/detail/CVE-2022-31744