Alertes
 

Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

mardi 19 janvier 2021

jointjs Package up to 3.2.x util.setByPath code injection

A vulnerability was found in jointjs Package up to 3.2.x and classified as critical. Affected by this issue is the function util.setByPath. Upgrading to version 3.3.0 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Lien vers l'article source

jointjs Package up to 3.2.x unsetByPath denial of service socket.io Packet up to 2.3.x CORS unknown vulnerability [CVE-2020-28481]
Auteur: VulDB

Catégories: VulDBNombre de vues: 54

x

Événements SSI