CVE-2022-30241: XSS
Published May 4, 2022
·Updated
The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
Affected Software
1 affected component
Jquery Json-viewer Project Jquery Json-viewer Node.js<=1.4.0
Remediation
Patch Available
Event History
May 4, 2022
CVE Published
via MITRE·05:29 PM
Data Sourced
via MITRE·05:29 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-30241?
CVE-2022-30241 is considered a high severity vulnerability due to improper character escaping in JSON object handling.
2
How do I fix CVE-2022-30241?
To fix CVE-2022-30241, upgrade the jquery.json-viewer library to version 1.4.1 or later.
3
What type of attack does CVE-2022-30241 facilitate?
CVE-2022-30241 can facilitate cross-site scripting (XSS) attacks by allowing unescaped characters in JSON responses.
4
Which versions of jquery.json-viewer are affected by CVE-2022-30241?
Versions up to and including 1.4.0 of the jquery.json-viewer library for Node.js are affected by CVE-2022-30241.
5
What libraries are impacted by CVE-2022-30241?
CVE-2022-30241 specifically impacts the jquery.json-viewer library used in Node.js applications.