{"id":"GHSA-7524-3396-fqv3","summary":"tarteaucitron.js allows UI manipulation via unrestricted CSS injection","details":"A vulnerability was identified in `tarteaucitron.js`, where user-controlled inputs for element dimensions (`width` and `height`) were not properly validated. This allowed an attacker with direct access to the site's source code or a CMS plugin to set values like `100%;height:100%;position:fixed;`, potentially covering the entire viewport and facilitating clickjacking attacks.\n\n## Impact\nAn attacker with high privileges could exploit this vulnerability to:\n- Overlay malicious UI elements on top of legitimate content,\n- Trick users into interacting with hidden elements (clickjacking),\n- Disrupt the intended functionality and accessibility of the website.\n\n## Fix https://github.com/AmauriC/tarteaucitron.js/commit/25fcf828aaa55306ddc09cfbac9a6f8f126e2d07\nThe issue was resolved by enforcing strict validation and sanitization of user-provided CSS values to prevent unintended UI manipulation.","aliases":["CVE-2025-31138"],"modified":"2025-04-07T18:12:11.701674Z","published":"2025-04-07T16:38:24Z","database_specific":{"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2025-04-07T16:38:24Z","nvd_published_at":"2025-04-07T15:15:44Z","cwe_ids":["CWE-1021"]},"references":[{"type":"WEB","url":"https://github.com/AmauriC/tarteaucitron.js/security/advisories/GHSA-7524-3396-fqv3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31138"},{"type":"WEB","url":"https://github.com/AmauriC/tarteaucitron.js/commit/25fcf828aaa55306ddc09cfbac9a6f8f126e2d07"},{"type":"PACKAGE","url":"https://github.com/AmauriC/tarteaucitron.js"}],"affected":[{"package":{"name":"tarteaucitronjs","ecosystem":"npm","purl":"pkg:npm/tarteaucitronjs"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/04/GHSA-7524-3396-fqv3/GHSA-7524-3396-fqv3.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"}]}