Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2021-20066

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

VectorNETWORK

PublishedFeb 16, 2021, 20:15

Published Byvulnreport@tenable.com

Base Score

Score5.6

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

jsdom(npm)016.5.0N/A

References

https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951
https://www.tenable.com/security/research/tra-2021-05

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

5.6

Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK