CVE-2024-45812

Description

Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/vitejs/vite/security/advisories/GHSA-64vr-g452-qvp3
• https://github.com/webpack/webpack/security/advisories/GHSA-4vvj-4cpr-p986
• https://nvd.nist.gov/vuln/detail/CVE-2024-45812
• https://github.com/vitejs/vite/commit/179b17773cf35c73ddb041f9e6c703fd9f3126af
• https://github.com/vitejs/vite/commit/2691bb3ff6b073b41fb9046909e1e03a74e36675
• https://github.com/vitejs/vite/commit/2ddd8541ec3b2d2e5b698749e0f2362ef28056bd
• https://github.com/vitejs/vite/commit/ade1d89660e17eedfd35652165b0c26905259fad
• https://github.com/vitejs/vite/commit/e8127166979e7ace6eeaa2c3b733c8994caa31f3
• https://github.com/vitejs/vite/commit/ebb94c5b3bf41950f45562595adec117a4d0ba5e
• https://github.com/vitejs/vite
• https://research.securitum.com/xss-in-amp4email-dom-clobbering
• https://scnps.co/papers/sp23_domclob.pdf