[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-4883-1 underscore -- underscore

ID: oval:org.secpod.oval:def:71229Date: (C)2021-04-18   (M)2022-06-06
Class: PATCHFamily: unix




It was discovered that missing input sanitising in the template function of the Underscore JavaScript library could result in the execution of arbitrary code.

Platform:
Linux Mint 4
Product:
node-underscore
libjs-underscore
Reference:
DSA-4883-1
CVE-2021-23358
CVE    1
CVE-2021-23358
CPE    3
cpe:/a:underscorejs:node-underscore
cpe:/a:underscorejs:libjs-underscore
cpe:/o:linux_mint:linux_mint:4

© SecPod Technologies