6.9Media
CVE-2025-52662
Descripción
A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| nuxt | devtools | < 2.6.4 | |
| Vercel | Nuxt Devtools | 2.6.3 – ≤ 2.6.3 |
Referencias y parches
- https://github.com/nuxt/devtools/commit/7cadbbe9 Patch
- https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools ExploitThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:nuxt:devtools:*:*:*:*:*:*:*:*< 2.6.4