PT-2023-11819 · Mholt · Papaparse

Mholt · Publicado 2020-09-04 · Atualizado 2024-05-17 · CVE-2020-36649

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions mholt PapaParse versions up to 5.1.x

Description A vulnerability was found in the file papaparse.js, leading to inefficient regular expression complexity. The issue is classified as problematic and affects an unknown function. Upgrading to version 5.2.0 addresses this issue.

Recommendations For versions up to 5.1.x, upgrade to version 5.2.0 to address the issue.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-1333

CWE-185

Identificadores relacionados

CVE-2020-36649

GHSA-798H-G4J5-5537

GHSA-QVJC-G5VR-MFGR

MGASA-2023-0204

Produtos afetados

Papaparse

Referências · 28

• 🔥 https://github.com/mholt/PapaParse/issues/777 · Exploit
• https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621 · Correção
• https://github.com/mholt/PapaParse/pull/779 · Correção
• https://github.com/mholt/PapaParse/releases/tag/5.2.0 · Correção
• https://github.com/mholt/PapaParse · Nota
• https://lists.wikimedia.org/hyperkitty/list/[e-mail]/message/6UQBHI5FWLATD7QO7DI4YS54U7XSSLAN · Nota
• https://phabricator.wikimedia.org/T326946 · Nota
• https://osv.dev/vulnerability/MGASA-2023-0204 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-36649 · Nota de Segurança
• https://npmjs.com/advisories/1515 · Nota
• https://t.me/cibsecurity/56354 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2020-36649 · Nota de Segurança
• https://vuldb.com/?ctiid.218004 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/ZGK4NZPIJ5ET2ANRZOUYPCRIB5I64JR7 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=31463 · Nota