GitHub Code Injection Vulnerability

GitHub Code Injection Vulnerability

On June 21, a Code Injection vulnerability for GitHub repository nuxt/nuxt prior to 3.5.3. has been released. (CVE-2023-3224)

Affected Systems

cpe:2.3:a:nuxt:nuxt:*:*:*:*:*:*:*:* Up to (excluding) 3.5.3

IoC’s

-

Recommended Solution(s)

-

Mitigations

-

CVE / CWE

CVE-2023-3224

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2023-3224
• https://helpx.adobe.com/security/products/magento/apsb23-35.html
• https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.