Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom
# Withdrawn Advisory This advisory has been withdrawn because the user must configure jsdom to allow access to local files. # Original Description JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-20066US | medium5.6 | — | ||
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/jsdom/jsdomPACKAGE
- https://github.com/jsdom/jsdom/issues/3124WEB
- https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951WEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-20066ADVISORY
- https://security.snyk.io/vuln/SNYK-JS-JSDOM-1075447WEB
- https://www.tenable.com/security/research/tra-2021-05WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan