CVE-2023-49146

Summary

CVE-2023-49146 is a vulnerability affecting DOMSanitizer, also known as dom-sanitizer, before version 1.0.7. This issue permits Cross-Site Scripting (XSS) attacks due to the mishandling of comments and an inappropriate use of greedy regular expressions within SVG documents. An attacker can inject malicious scripts into web pages, potentially leading to data theft or unauthorized actions by exploiting this vulnerability. Users are advised to upgrade to the latest version of DOMSanitizer to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.