漏洞描述
NPM karma prior to 6.3.14. contains a DOM-based cross-site Scripting vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
huntr.devhttps://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885↗github.comhttps://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-0437↗github.comhttps://github.com/karma-runner/karma↗github.comhttps://github.com/ARPSyndicate/cvemon↗