vuejs vue-cli har 5.0.8 Markdown Code HtmlPwaPlugin.js HtmlPwaPlugin Kari na aiki
Hakika vulnerability da aka rarraba a matsayin karshewa an gano a vuejs vue-cli har 5.0.8. Tabbas, aikin HtmlPwaPlugin ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js, a cikin sashi Markdown Code Handler. Wuro manipulation ga Kari na aiki. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-1333. Lalle, rauni an sanar da shi 06/09/2025 da 7478. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2025-5897. Ngam yiɗi ka a tuma ndiyam ka nder internet. Bayani na fasaha ga. Babu wani exploit da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
2 Goyarwa · 55 Datenpunkte
| Furɗe | Súgá 06/09/2025 09:07 | Gargadi 1/1 06/10/2025 01:08 |
|---|---|---|
| software_vendor | vuejs | vuejs |
| software_name | vue-cli | vue-cli |
| software_version | <=5.0.8 | <=5.0.8 |
| software_component | Markdown Code Handler | Markdown Code Handler |
| software_file | packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js | packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js |
| software_function | HtmlPwaPlugin | HtmlPwaPlugin |
| vulnerability_cwe | CWE-1333 (Kari na aiki) | CWE-1333 (Kari na aiki) |
| vulnerability_risk | 1 | 1 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_ui | N | N |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | N | N |
| cvss3_vuldb_i | N | N |
| cvss3_vuldb_a | L | L |
| cvss3_vuldb_rl | T | T |
| cvss3_vuldb_rc | R | R |
| advisory_identifier | 7478 | 7478 |
| advisory_url | https://github.com/vuejs/vue-cli/pull/7478 | https://github.com/vuejs/vue-cli/pull/7478 |
| source_cve | CVE-2025-5897 | CVE-2025-5897 |
| cna_responsible | VulDB | VulDB |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_ci | N | N |
| cvss2_vuldb_ii | N | N |
| cvss2_vuldb_ai | P | P |
| cvss2_vuldb_rc | UR | UR |
| cvss2_vuldb_rl | TF | TF |
| cvss4_vuldb_av | N | N |
| cvss4_vuldb_ac | L | L |
| cvss4_vuldb_ui | N | N |
| cvss4_vuldb_vc | N | N |
| cvss4_vuldb_vi | N | N |
| cvss4_vuldb_va | L | L |
| cvss2_vuldb_au | S | S |
| cvss2_vuldb_e | ND | ND |
| cvss3_vuldb_pr | L | L |
| cvss3_vuldb_e | X | X |
| cvss4_vuldb_at | N | N |
| cvss4_vuldb_pr | L | L |
| cvss4_vuldb_sc | N | N |
| cvss4_vuldb_si | N | N |
| cvss4_vuldb_sa | N | N |
| cvss4_vuldb_e | X | X |
| cvss2_vuldb_basescore | 4.0 | 4.0 |
| cvss2_vuldb_tempscore | 3.4 | 3.4 |
| cvss3_vuldb_basescore | 4.3 | 4.3 |
| cvss3_vuldb_tempscore | 4.0 | 4.0 |
| cvss3_meta_basescore | 4.3 | 4.3 |
| cvss3_meta_tempscore | 4.0 | 4.0 |
| cvss4_vuldb_bscore | 5.3 | 5.3 |
| cvss4_vuldb_btscore | 5.3 | 5.3 |
| advisory_date | 1749420000 (06/09/2025) | 1749420000 (06/09/2025) |
| price_0day | $0-$5k | $0-$5k |
| euvd_id | EUVD-2025-17579 |