.. / CVE-2022-0437

• XSS
• Nuclei
• Web

Exploit for karma-runner DOM-based Cross-Site Scripting (CVE-2022-0437)

Description:

NPM karma prior to 6.3.14. contains a DOM-based cross-site Scripting vulnerability.

Nuclei Template

View the template here CVE-2022-0437.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-0437.yaml

References: