NVD脆弱性詳細

Exploit、PoC検索

NVD脆弱性検索トップ

->

NVD脆弱性詳細

CVE-2020-36649

概要	A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218004.
公表日	2023年1月12日0:15
登録日	2023年1月12日10:00
最終更新日	2024年11月21日14:30

CVSS3.1 : HIGH
スコア	7.5
ベクター	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:papaparse:papaparse::::::::		5.1.0			5.2.0

関連情報、対策とツール

No	URL	refsource	タグ
1	https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621		Patch Third Party Advisory
2	https://github.com/mholt/PapaParse/commit/235a12758cd77266d2e98fd715f53536b34ad621		Patch Third Party Advisory
3	https://github.com/mholt/PapaParse/issues/777		Exploit Issue Tracking Third Party Advisory
4	https://github.com/mholt/PapaParse/issues/777		Exploit Issue Tracking Third Party Advisory
5	https://github.com/mholt/PapaParse/pull/779		Patch Third Party Advisory
6	https://github.com/mholt/PapaParse/pull/779		Patch Third Party Advisory
7	https://github.com/mholt/PapaParse/releases/tag/5.2.0		Release Notes Third Party Advisory
8	https://github.com/mholt/PapaParse/releases/tag/5.2.0		Release Notes Third Party Advisory
9	https://vuldb.com/?ctiid.218004		Permissions Required Third Party Advisory
10	https://vuldb.com/?ctiid.218004		Permissions Required Third Party Advisory
11	https://vuldb.com/?id.218004		Permissions Required Third Party Advisory
12	https://vuldb.com/?id.218004		Permissions Required Third Party Advisory

共通脆弱性一覧