CVE-2023-3481 — XSS in Chrome Lab Critters

CVE-2023-3481

XSS in Chrome Lab Critters PUBLISHED

Description (CNA)

Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgrading to version 0.0.20 of the extension.

Affected (CNA)

Vendor / product	Versions
Google Chrome Labs / Critters	affected 0.0.17 before 0.0.19

CWE

CWE-80, CWE-116

References

https://github.com/GoogleChromeLabs/critters/security/advisories/GHSA-cx3j-qqxj-9597

ADP enrichment

CVE

No English description supplied.

https://github.com/GoogleChromeLabs/critters/security/advisories/GHSA-cx3j-qqxj-9597

CISA-ADP

No English description supplied.

No references supplied.