Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten_run_script function.
**Note:** This vulnerability is present only when compiling raylib for PLATFORM_WEB. All the other Desktop/Mobile/Embedded platforms are not affected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2023-04-14T05:00:01.188Z
Updated: 2024-08-02T11:39:06.852Z
Reserved: 2023-02-20T10:28:48.923Z
Link: CVE-2023-26123
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-04-14T05:15:13.867
Modified: 2024-11-21T07:50:49.430
Link: CVE-2023-26123
Redhat
No data.