.. / CVE-2021-3377

• XSS
• Nuclei
• Web

Exploit for npm ansi_up v4 - Cross-Site Scripting (CVE-2021-3377)

Description:

npm package ansi_up v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks.

Nuclei Template

View the template here CVE-2021-3377.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-3377.yaml

References: