Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom
# Withdrawn Advisory This advisory has been withdrawn because the user must configure jsdom to allow access to local files. # Original Description JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-20066US | medium5.6 | — | ||
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/jsdom/jsdomPACKAGE
- https://github.com/jsdom/jsdom/issues/3124WEB
- https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951WEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-20066ADVISORY
- https://security.snyk.io/vuln/SNYK-JS-JSDOM-1075447WEB
- https://www.tenable.com/security/research/tra-2021-05WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan