CVE-2025-52662: XSS
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52662?
CVE-2025-52662 has been classified as a moderate severity vulnerability due to its potential to allow XSS attacks under certain configurations.
How do I fix CVE-2025-52662?
To fix CVE-2025-52662, users should upgrade to Nuxt DevTools version 2.6.4 or later.
What does CVE-2025-52662 affect?
CVE-2025-52662 affects the Nuxt DevTools by allowing possible extraction of auth tokens through XSS.
When was CVE-2025-52662 disclosed?
CVE-2025-52662 was disclosed when the vulnerability was fixed in version 2.6.4 of Nuxt DevTools.
What should I do if I cannot upgrade Nuxt DevTools to fix CVE-2025-52662?
If an upgrade is not possible, consider implementing security measures to mitigate XSS attacks and monitor for any suspicious activities.