github.com
https://github.com/nuxt/nuxt CVE-2023-3224
Code Injection in nuxt/nuxt
Description
Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 3, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
nuxt/nuxtBrowse nuxt / nuxt/nuxt | CVE List | Before 3.5.3 | affected |
| GitHub Advisory | 3.4.0 to < 3.4.3 · Fixed in 3.4.3 | affected |
References
7github.com
https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff github.com
https://github.com/nuxt/nuxt/commit/72ba53efbc2384f802d654fffd92eaf36a81b507 github.com
https://github.com/nuxt/nuxt/commits/v3.4.3 github.com
https://github.com/nuxt/nuxt/issues/21694 huntr.dev
https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-3224