Описание
gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without rejecting proto, constructor, or prototype. When an application converts untrusted PO or i18next translation data, a proto segment resolves Object.prototype as the nested write target and Object.assign writes attacker-controlled translated properties onto the process-wide prototype. The resulting prototype pollution can cause denial of service and may enable application-dependent follow-on attacks. This issue is fixed in version 1.3.3.
A flaw was found in gettext-converter. This vulnerability, known as prototype pollution, occurs in the js2i18next() function when processing untrusted translation data. An attacker can craft malicious translation keys containing __proto__ to modify the global Object.prototype. This can lead to a denial of service (DoS) and potentially enable further application-specific attacks.
Отчет
This is an Important flaw in gettext-converter that allows for prototype pollution when processing untrusted translation data. This vulnerability, affecting components within OpenShift Container Platform and Red Hat OpenShift Data Foundations, can lead to a denial of service. The ability for an attacker to manipulate object prototypes without authentication or complex attack conditions elevates the risk beyond a Moderate impact.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| OpenShift Pipelines | openshift-pipelines/pipelines-console-plugin-pf5-rhel9 | Not affected | ||
| OpenShift Pipelines | openshift-pipelines/pipelines-console-plugin-rhel8 | Not affected | ||
| OpenShift Pipelines | openshift-pipelines/pipelines-console-plugin-rhel9 | Not affected | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console | Affected | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-console-rhel9 | Affected | ||
| Red Hat Openshift Data Foundation 4 | odf4/ocs-client-console-rhel9 | Affected | ||
| Red Hat Openshift Data Foundation 4 | odf4/odf-console-rhel9 | Affected | ||
| Red Hat Openshift Data Foundation 4 | odf4/odf-multicluster-console-rhel9 | Affected | ||
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-ocs-client-console-rhel9 | Affected | ||
| Red Hat Openshift Data Foundation 4 | rhceph-dev/odf4-odf-console-rhel9 | Affected |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
8.2 High
CVSS3
Связанные уязвимости
gettext-converter provides gettext resource conversion utilities for JavaScript. Prior to 1.3.3, js2i18next() in lib/js2i18next.js splits nested translation keys using options.keyseparator, whose default value consists of two number signs, and uses each segment as a dynamic object key without rejecting __proto__, constructor, or prototype. When an application converts untrusted PO or i18next translation data, a __proto__ segment resolves Object.prototype as the nested write target and Object.assign writes attacker-controlled translated properties onto the process-wide prototype. The resulting prototype pollution can cause denial of service and may enable application-dependent follow-on attacks. This issue is fixed in version 1.3.3.
gettext-converter: Prototype pollution in js2i18next() via crafted translation keys
8.2 High
CVSS3