PT-2023-12421 · Nhn · Nhn Toast Ui Chart

Arjunshibu · Published 2023-02-22 · Updated 2024-05-17 · CVE-2021-4325

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NHN TOAST UI Chart version 4.1.4

Description This issue affects some unknown processing of the component Legend Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely.

Recommendations For NHN TOAST UI Chart version 4.1.4, upgrade to version 4.2.0 to address this issue. As a temporary workaround, consider disabling the Legend Handler component until the patch is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-4325

Affected Products

Nhn Toast Ui Chart

References · 10

• https://github.com/nhn/tui.chart/releases/tag/v4.2.0 · Patch
• https://github.com/nhn/tui.chart/commit/1a3f455d17df379e11b501bb5ba1dd1bcc41d63e · Patch
• https://osv.dev/vulnerability/CVE-2021-4325 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4325 · Security Note
• https://github.com/nhn/tui.chart/pull/604 · Note
• https://t.me/cvenotify/44778 · Telegram Post
• https://vuldb.com/?id.221501 · Note
• https://t.me/cibsecurity/58657 · Telegram Post
• https://vuldb.com/?ctiid.221501 · Note
• https://t.me/cvenotify/45433 · Telegram Post