Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-24556

urql is a GraphQL client that exposes a set of helpers for several frameworks. The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream. To fix this vulnerability upgrade to version 1.1.1
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v3 Score 7.2
Products affected by CVE-2024-24556
  • Nearform » Urql » Version: 0.3.1
    cpe:2.3:a:nearform:urql:0.3.1
  • Nearform » Urql » Version: 0.3.2
    cpe:2.3:a:nearform:urql:0.3.2
  • Nearform » Urql » Version: 0.3.3
    cpe:2.3:a:nearform:urql:0.3.3
  • Nearform » Urql » Version: 0.3.4
    cpe:2.3:a:nearform:urql:0.3.4
  • Nearform » Urql » Version: 0.3.5
    cpe:2.3:a:nearform:urql:0.3.5
  • Nearform » Urql » Version: 0.3.6
    cpe:2.3:a:nearform:urql:0.3.6
  • Nearform » Urql » Version: 0.3.7
    cpe:2.3:a:nearform:urql:0.3.7
  • Nearform » Urql » Version: 0.3.8
    cpe:2.3:a:nearform:urql:0.3.8
  • Nearform » Urql » Version: 1.0.0
    cpe:2.3:a:nearform:urql:1.0.0
  • Nearform » Urql » Version: 1.0.1
    cpe:2.3:a:nearform:urql:1.0.1
  • Nearform » Urql » Version: 1.0.2
    cpe:2.3:a:nearform:urql:1.0.2
  • Nearform » Urql » Version: 1.1.0
    cpe:2.3:a:nearform:urql:1.1.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved