CVE-2022-48345

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Feb 24, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-483467.5The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.CVE-2022-483477.5The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiCVE-2022-483489.1The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiaCVE-2022-483499.1The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availabilitCVE-2022-48355.4The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting themCVE-2022-483507.5The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentCVE-2022-483517.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.CVE-2022-483527.5Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.CVE-2022-483539.8Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which resulCVE-2022-483546.5The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth proCVE-2022-483556.5The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth procCVE-2022-483567.5The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause f
CVE-2022-48345: Medium severity, CVSS 6.1 | Vulnix