PT-2019-10243 · Highcharts · Highcharts Js

Publicado 2019-03-14 · Atualizado 2019-07-15 · CVE-2018-20801

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Highcharts JS versions prior to 6.1.0

Description: The issue concerns a denial of service attack against the SVGRenderer component due to the use of backtracking regular expressions. Untrusted input may cause catastrophic backtracking while matching regular expressions, leading to the application being unresponsive and resulting in a denial of service.

Recommendations: For Highcharts JS versions prior to 6.1.0, upgrade to version 6.1.0 or higher.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-185

CWE-1333

Identificadores relacionados

CVE-2018-20801

GHSA-XMC8-CJFR-PHX3

Produtos afetados

Highcharts Js

Referências · 10

• 🔥 https://snyk.io/vuln/npm:highcharts:20180225 · Exploit
• https://github.com/highcharts/highcharts · Nota
• https://github.com/highcharts/highcharts/commit/7c547e1e0f5e4379f94396efd559a566668c0dfa · Correção
• https://osv.dev/vulnerability/CVE-2018-20801 · Aviso do Fabricante
• https://github.com/advisories/GHSA-xmc8-cjfr-phx3 · Nota
• https://security.netapp.com/advisory/ntap-20190715-0001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-20801 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20801 · Nota
• https://osv.dev/vulnerability/GHSA-xmc8-cjfr-phx3 · Aviso do Fabricante
• https://npmjs.com/advisories/793 · Nota