Approved changes feed: RSS · Atom

cpe:2.3:a:vuejs:vue:2.0.0:*:*:*:*:*:*:*

part: a version: 2.0.0 update: *

VendorVuejs (18112002-85e9-56ca-a218-917a2ff361be)
ProductVue (f3926eb6-0056-54c4-9d7d-5419b94f1de8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6783 vulnerable 2026-06-08 06:58:20.432207 Vue client-side XSS via prototype pollution
MEDIUM (4.8)
A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker could change the prototype chain of some properties such as `Object.prototype.staticClass` or `Object.prototype.staticStyle` to execute arbitrary JavaScript code.
Published: 2024-07-23T15:05:57.752Z
Updated: 2024-08-30T14:51:11.346Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.