CVE-2021-22540
XSS in Dart SDK
- State
- Published
- Severity
- Not scored
- Published
- Apr 22, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 5, 2021
Description
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags.
Scores
The record has no CVSS score.
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation
Affected Products
| Product | Versions |
|---|---|
Dart SDKGoogle LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.