PT-2020-19766 · Scratch · Scratch-Svg-Renderer

Apple502J · Published 2020-10-21 · Updated 2020-12-02 · CVE-2020-7750

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions scratch-svg-renderer versions prior to 0.2.0-prerelease.20201019174008

Description The issue concerns the loadString function, which fails to properly escape SVG. This can lead to the injection of arbitrary elements into the DOM via the transformMeasurements function.

Recommendations For versions prior to 0.2.0-prerelease.20201019174008, consider disabling the loadString function until a patch is available to prevent potential DOM injection attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-7750

GHSA-J977-G5VJ-J27G

SNYK-JS-SCRATCHSVGRENDERER-1020497

Affected Products

Scratch-Svg-Renderer

References · 6

• 🔥 https://exploit-db.com/exploits/50079 · Exploit
• https://github.com/LLK/scratch-svg-renderer/commit/9ebf57588aa596c4fa3bb64209e10ade395aee90 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-7750 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7750 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j977-g5vj-j27g · Vendor Advisory
• https://snyk.io/vuln/SNYK-JS-SCRATCHSVGRENDERER-1020497 · Note