mavo DOM Clobbering vulnerability
Date: 2025-03
Affected: npm/mavo
Attack vector: rce
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2024-53388
CWE: CWE-79

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element.


Mitigations:

Architectural layers (MAESTRO):