CVE-2023-30792 — Meta Platforms, Inc / Lexical

CVE-2023-30792

Meta Platforms, Inc / Lexical PUBLISHED

Description (CNA)

Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted sources.

Affected (CNA)

Vendor / product	Versions
Meta Platforms, Inc / Lexical	affected 0.0.0 before 0.10.0

CWE

No CWE identifiers supplied.

References

https://github.com/facebook/lexical/releases/tag/v0.10.0

ADP enrichment

CVE

No English description supplied.

https://github.com/facebook/lexical/releases/tag/v0.10.0

CISA-ADP

No English description supplied.

No references supplied.