VDB
BDU%3A2021-05423
BDU%3A2021-05423
PUBLISHED
CVSS 7.5 HIGH
Уязвимость пакета datatables.net библиотеки DataTables, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., IBM Corp., Phpzag | Red Hat Virtualization Engine, Red Hat Virtualization, IBM Spectrum Protect Plus, DataTables | |
| Red Hat, Inc., IBM Corp., Phpzag | Red Hat Virtualization Engine, Red Hat Virtualization, IBM Spectrum Protect Plus, DataTables |
Timeline
- Nov 12, 2021 CVE Published
References
- https://github.com/DataTables/DataTablesSrc/commit/a51cbe99fd3d02aa5582f97d4af1615d11a1ea03 advisory
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1051961 url
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1051962 url
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402 url
- https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806 url
- https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-and-node-js-affect-ibm-spectrum-protect-plus/ advisory
- https://access.redhat.com/security/cve/cve-2020-28458 advisory
- https://github.com/418sec/huntr/pull/827 advisory
- https://www.npmjs.com/package/datatables.net url
- https://datatables.net/ advisory