CVE-2021-23327 Information

Description

The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Reference

https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616 https://github.com/apexcharts/apexcharts.js/pull/2158 https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

LOW

Base Score

LOW

Base Severity

6.3