PT-2020-6799 · Chart.Js · Chartjs

Published

2020-10-29

·

Updated

2022-12-02

·

CVE-2020-7746

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions chart.js versions prior to 2.9.4
Description The issue is related to the options parameter not being properly sanitized when processed. This leads to a prototype pollution when the existing options (or default options) are deeply merged with provided options, as the keys of the object being set are not checked. This could potentially allow a remote attacker to execute arbitrary code.
Recommendations For chart.js versions prior to 2.9.4, update to version 2.9.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the options parameter until a patch is available.

Exploit

Fix

Prototype Pollution

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1321CWE-915

Related Identifiers

BDU:2022-06615
CVE-2020-7746
GHSA-H68Q-55JF-X68W
SNYK-JAVA-ORGWEBJARSBOWER-1019375
SNYK-JAVA-ORGWEBJARSBOWERGITHUBCHARTJS-1019376
SNYK-JAVA-ORGWEBJARSNPM-1019374
SNYK-JS-CHARTJS-1018716

Affected Products

Chartjs