PT-2015-7940 · Mozilla · Uglify-Js

Publicado 2015-11-19 · Atualizado 2015-11-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions UglifyJS (affected versions not specified)

Description The issue arises from the combination of De Morgan's Law and non-boolean values, leading to incorrect minification of code. This can result in potentially malicious minified JavaScript code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0454

Produtos afetados

Uglify-Js

Referências · 4

• http://openwall.com/lists/oss-security/2015/08/24/5 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=16643 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0454 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0454.html · Nota de Segurança