CVE-2022-23458: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

September 22, 2022 (updated September 24, 2022)

Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 is vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

References

github.com/nhn/tui.grid/commit/e9db5968675ae113c07efc091cce210f2b26854f
nvd.nist.gov/vuln/detail/CVE-2022-23458
securitylab.github.com/advisories/GHSL-2022-029_nhn_tui_grid/

Code Behaviors & Features

Detect and mitigate CVE-2022-23458 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →