CVE-2023-3481CWE-116CWE-80

XSS in Chrome Lab Critters

Medium · published August 21, 2023

CVSS v3.1
5.7
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to version 0.0.20 of the extension.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00169 · 6.0th percentile
Weaknesses
CWE-116 · Improper Encoding or Escaping of Output; CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2023-08-21T10:04Z
EPSS history
Timeline
  • 21 AUG 10:04Z
    XSS in Chrome Lab Critters
    cvelistv5