CVE-2021-20066

Опубликовано: 16 фев. 2021

Источник: nvd

CVSS3: 5.6

CVSS2: 6.8

EPSS Низкий

Описание

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

Ссылки

https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951
Exploit
Issue Tracking
Third Party Advisory
https://www.tenable.com/security/research/tra-2021-05
Exploit
Third Party Advisory
https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951
Exploit
Issue Tracking
Third Party Advisory
https://www.tenable.com/security/research/tra-2021-05
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jsdom_project:jsdom:-:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00378

Низкий

5.6 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2021-20066

CVSS3: 5.6

ubuntu

почти 5 лет назад

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

CVE-2021-20066

CVSS3: 5.6

redhat

почти 5 лет назад

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

CVE-2021-20066

CVSS3: 5.6

debian

почти 5 лет назад

JSDom improperly allows the loading of local resources, which allows f ...

GHSA-f4c9-cqv8-9v98

github

больше 3 лет назад

Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom

EPSS

Процентиль: 59%

0.00378

Низкий

5.6 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo