CLEANSTART-2024-DX10048
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-DX10048.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2024-DX10048
- Upstream
- Published
- 2026-10-31T14:34:07Z
- Modified
- 2026-10-31T16:00:14Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content
- Details
-
CVE-2021-23999 affects multiple packages. If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. See references for individual vulnerability details.
- References