Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Chris Stephens

#37628of 53,632
7.5Total CVSS
Vulnerabilities · 1
PT-2020-19793
7.5
2020-12-11
I18N · I18N · CVE-2020-7791
**Name of the Vulnerable Software and Affected Versions** i18n versions prior to 2.1.15 **Description** The issue arises from insufficient handling of erroneous language tags in the files src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs. This results in a vulnerability that affects the package i18n. **Recommendations** For versions prior to 2.1.15, update to version 2.1.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the `TextLocalizer.cs` and `LocalizedApplication.cs` files until a patch is applied. Avoid using erroneous language tags in the affected files to minimize the risk of exploitation.