CVE-2022-0776: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

March 1, 2022 (updated March 9, 2022)

Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.

References

github.com/advisories/GHSA-hhqj-cfjx-vj25
github.com/hakimel/reveal.js/commit/32cdd3b1872ba8e2267c9e87ae216cb55f40f4d2
huntr.dev/bounties/be2b7ee4-f487-42e1-874a-6bcc410e4001
nvd.nist.gov/vuln/detail/CVE-2022-0776

Code Behaviors & Features

Detect and mitigate CVE-2022-0776 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →