PT-2021-15529 · Jointjs · Jointjs

Alessio Della Libera · Published 2021-09-21 · Updated 2021-10-02 · CVE-2021-23444

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions jointjs versions prior to 3.4.2

Description A type confusion issue can lead to a bypass when user-provided keys used in the path parameter are arrays in the setByPath function.

Recommendations For versions prior to 3.4.2, update to version 3.4.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the setByPath function with array values in the path parameter until a patch is available.

Exploit

Fix

Type Confusion

Prototype Pollution

Weakness Enumeration

CWE-843

CWE-1321

Related Identifiers

CVE-2021-23444

GHSA-F3PP-32QC-36W4

SNYK-JAVA-ORGWEBJARSBOWER-1655817

SNYK-JAVA-ORGWEBJARSNPM-1655816

SNYK-JS-JOINTJS-1579578

Affected Products

Jointjs

References · 11

• 🔥 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1655817 · Exploit
• 🔥 https://snyk.io/vuln/SNYK-JS-JOINTJS-1579578 · Exploit
• 🔥 https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1655816 · Exploit
• https://github.com/clientIO/joint/commit/e5bf89efef6d5ea572d66870ffd86560de7830a8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-23444 · Security Note
• https://osv.dev/vulnerability/CVE-2021-23444 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f3pp-32qc-36w4 · Vendor Advisory
• https://github.com/clientIO/joint/releases/tag/v3.4.2 · Note
• https://github.com/clientIO/joint/pull/1514 · Note
• https://github.com/clientIO/joint · Note
• https://t.me/cibsecurity/29191 · Telegram Post