PT-2023-12421 · Nhn · Nhn Toast Ui Chart

Arjunshibu · Publicado 2023-02-22 · Atualizado 2024-05-17 · CVE-2021-4325

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NHN TOAST UI Chart version 4.1.4

Description This issue affects some unknown processing of the component Legend Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely.

Recommendations For NHN TOAST UI Chart version 4.1.4, upgrade to version 4.2.0 to address this issue. As a temporary workaround, consider disabling the Legend Handler component until the patch is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2021-4325

Produtos afetados

Nhn Toast Ui Chart

Referências · 10

• https://github.com/nhn/tui.chart/pull/604 · Nota
• https://github.com/nhn/tui.chart/releases/tag/v4.2.0 · Correção
• https://github.com/nhn/tui.chart/commit/1a3f455d17df379e11b501bb5ba1dd1bcc41d63e · Correção
• https://t.me/cvenotify/44778 · Publicação no Telegram
• https://vuldb.com/?id.221501 · Nota
• https://osv.dev/vulnerability/CVE-2021-4325 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-4325 · Nota de Segurança
• https://t.me/cibsecurity/58657 · Publicação no Telegram
• https://vuldb.com/?ctiid.221501 · Nota
• https://t.me/cvenotify/45433 · Publicação no Telegram