CVE-2024-22048
CVSS V2 None
CVSS V3 None
Description
govuk_tech_docs versions from 2.0.2 to before 3.3.1 are vulnerable to a cross-site scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.
Overview
- CVE ID
- CVE-2024-22048
- Assigner
- VulnCheck
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-01-04T20:39:59.670Z
- Last Modified Date
- 2024-01-04T20:39:59.670Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773 | vendor-advisory |
| https://github.com/alphagov/tech-docs-gem/pull/323 | patch |
| https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1 | related |
| https://github.com/advisories/GHSA-x2xw-hw8g-6773 | third-party-advisory |
| https://vulncheck.com/advisories/vc-advisory-GHSA-x2xw-hw8g-6773 | third-party-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-22048 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22048 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 09:13:49 | Added to TrackCVE |