Vulnerability Description
The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to sanitize SVGs to prevent XSS. In doing so, literal `<script>`-tags and on-event handlers were detected in versions prior to 0.4.0. As a result, downstream software that relies on `sanitize-svg` and expects resulting SVGs to be safe, may be vulnerable to cross-site scripting. This vulnerability was addressed in v0.4.0. There are no known workarounds
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sanitize-Svg Project | Sanitize-Svg | < 0.4.0 |
Related Weaknesses (CWE)
References
- https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474cPatchThird Party Advisory
- https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468ExploitThird Party Advisory
- https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474cPatchThird Party Advisory
- https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468ExploitThird Party Advisory
FAQ
What is CVE-2023-22461?
CVE-2023-22461 is a vulnerability with a CVSS score of 7.6 (HIGH). The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to sanitize SVGs to prevent XSS. In doing so, literal `<script>`-tags and on-event h...
How severe is CVE-2023-22461?
CVE-2023-22461 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22461?
Check the references section above for vendor advisories and patch information. Affected products include: Sanitize-Svg Project Sanitize-Svg.