ByteOS Network

NVD Vulnerability Details :

CVE-2021-23327

Analyzed

Source-report@snyk.io

Published At-09 Feb, 2021 | 08:15

Updated At-13 Feb, 2021 | 02:20

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

fusioncharts>>apexcharts>>Versions before 3.24.0(exclusive)

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

Hyperlink	Source	Resource
https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19	report@snyk.io	Patch Third Party Advisory
https://github.com/apexcharts/apexcharts.js/pull/2158	report@snyk.io	Exploit Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616	report@snyk.io	Third Party Advisory
https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708	report@snyk.io	Third Party Advisory