VDB
BDU%3A2022-06615
BDU%3A2022-06615
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость компонента chart.js приложения для выявления, анализа и визуализация бизнес-рисков IBM Data Risk Manager, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM Corp., Сообщество свободного программного обеспечения | IBM Data Risk Manager, chart.js |
Timeline
- Nov 3, 2022 CVE Published
References
- https://github.com/chartjs/Chart.js/pull/7920 url
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1019375 url
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCHARTJS-1019376 url
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019374 url
- https://snyk.io/vuln/SNYK-JS-CHARTJS-1018716 url
- https://www.ibm.com/support/pages/node/6570915 url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-data-risk-manager-is-affected-by-multiple-vulnerabilities-including-a-remote-code-execution-in-spring-framework-cve-2022-22965/ url