mholt PapaParse har 5.1.x papaparse.js Kari na aiki

GumtiBandagandayajsonxmlCTI

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin mholt PapaParse har 5.1.x. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, papaparse.js na cikin fayil, $software_component na cikin sashi. Ngam manipulation shi Kari na aiki. CWE shidin ka a yi bayani matsala sai ya kai CWE-1333. Gaskiya, laifi an fitar da shi 01/11/2023 a matsayin 777. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2020-36649. Wuro ndiyam na local network ɗin sai a samu kafin wannan hari ya yi nasara. Tekinikal bayani ga. Ba exploit ɗin da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k. Patch ɗin sunan ganowa shine 235a12758cd77266d2e98fd715f53536b34ad621. Bugfix ɗin an shirya shi don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Waktin goyi

Màdùmga

VulDB Mod Team	74

Furɗe

cvss3_meta_tempscore	2
cvss3_meta_basescore	2
cvss3_cna_basescore	1
cvss3_nvd_basescore	1
cvss2_nvd_basescore	1

Commit Conf

90%	35
70%	25
50%	14

Approve Conf

90%	35
70%	25
80%	14

74 Kari

ID	Sanda	Màdùmga	Furɗe	Gargajiya	Garga	Gargajiya	Jawan	C
13621193	02/01/2023	VulDB…	cvss3_cna_basescore	3.5	see CVSS documentation	02/01/2023	shingilam	90
13621192	02/01/2023	VulDB…	cvss3_nvd_basescore	7.5	nist.gov	02/01/2023	shingilam	90
13621191	02/01/2023	VulDB…	cvss2_nvd_basescore	2.3	nist.gov	02/01/2023	shingilam	90
13621190	02/01/2023	VulDB…	cvss3_meta_tempscore	4.8	see CVSS documentation	02/01/2023	shingilam	90
13621189	02/01/2023	VulDB…	cvss3_meta_basescore	4.8	see CVSS documentation	02/01/2023	shingilam	90
13621188	02/01/2023	VulDB…	cve_cna	VulDB	nvd.nist.gov	02/01/2023	shingilam	70
13621187	02/01/2023	VulDB…	cvss3_cna_a	L	nvd.nist.gov	02/01/2023	shingilam	70
13621186	02/01/2023	VulDB…	cvss3_cna_i	N	nvd.nist.gov	02/01/2023	shingilam	70
13621185	02/01/2023	VulDB…	cvss3_cna_c	N	nvd.nist.gov	02/01/2023	shingilam	70
13621184	02/01/2023	VulDB…	cvss3_cna_s	U	nvd.nist.gov	02/01/2023	shingilam	70
13621183	02/01/2023	VulDB…	cvss3_cna_ui	N	nvd.nist.gov	02/01/2023	shingilam	70
13621182	02/01/2023	VulDB…	cvss3_cna_pr	L	nvd.nist.gov	02/01/2023	shingilam	70
13621181	02/01/2023	VulDB…	cvss3_cna_ac	L	nvd.nist.gov	02/01/2023	shingilam	70
13621180	02/01/2023	VulDB…	cvss3_cna_av	A	nvd.nist.gov	02/01/2023	shingilam	70
13621179	02/01/2023	VulDB…	cvss2_nvd_ai	P	nvd.nist.gov	02/01/2023	shingilam	70
13621178	02/01/2023	VulDB…	cvss2_nvd_ii	N	nvd.nist.gov	02/01/2023	shingilam	70
13621177	02/01/2023	VulDB…	cvss2_nvd_ci	N	nvd.nist.gov	02/01/2023	shingilam	70
13621176	02/01/2023	VulDB…	cvss2_nvd_au	S	nvd.nist.gov	02/01/2023	shingilam	70
13621175	02/01/2023	VulDB…	cvss2_nvd_ac	M	nvd.nist.gov	02/01/2023	shingilam	70
13621174	02/01/2023	VulDB…	cvss2_nvd_av	A	nvd.nist.gov	02/01/2023	shingilam	70