CVE Catalog

CVE-2023-3224

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
58.65%

99th percentile - higher than 99% of all known CVEs

Summary

There is a code injection vulnerability in the GitHub repository nuxt/nuxt prior to version 3.5.3.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious code, potentially compromising the application.

Recommendation

It is recommended to upgrade to version 3.5.3 or later to mitigate this vulnerability.

Original NVD description (English source)

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS