{"id":"GHSA-gc34-5v43-h7v8","summary":"nuxt Code Injection vulnerability","details":"he Nuxt dev server between versions 3.4.0 and 3.4.3 is vulnerable to code injection when it is exposed publicly.","aliases":["CVE-2023-3224"],"modified":"2024-11-18T16:26:30Z","published":"2023-06-13T18:30:40Z","database_specific":{"github_reviewed_at":"2023-06-21T22:09:01Z","nvd_published_at":"2023-06-13T18:15:22Z","cwe_ids":["CWE-94"],"severity":"CRITICAL","github_reviewed":true},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3224"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/issues/21694"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/commit/72ba53efbc2384f802d654fffd92eaf36a81b507"},{"type":"PACKAGE","url":"https://github.com/nuxt/nuxt"},{"type":"WEB","url":"https://github.com/nuxt/nuxt/commits/v3.4.3"},{"type":"WEB","url":"https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87"}],"affected":[{"package":{"name":"nuxt","ecosystem":"npm","purl":"pkg:npm/nuxt"},"ranges":[{"type":"SEMVER","events":[{"introduced":"3.4.0"},{"fixed":"3.4.3"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-gc34-5v43-h7v8/GHSA-gc34-5v43-h7v8.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}