File tree Expand file tree Collapse file tree 1 file changed +16
-2
lines changed Expand file tree Collapse file tree 1 file changed +16
-2
lines changed Original file line number Diff line number Diff line change 1
1
---
2
2
gem : uglifier
3
+ cve : 2015-8857
3
4
osvdb : 126747
5
+ ghsa : 34r7-q49f-h37c
4
6
url : https://github.com/mishoo/UglifyJS2/issues/751
5
7
title : uglifier incorrectly handles non-boolean comparisons during minification
6
8
date : 2015-07-21
@@ -14,6 +16,18 @@ description: |2
14
16
to allow potentially malicious code to be hidden within secure code,
15
17
and activated by the minification process.
16
18
17
- For more information, consult: https://zyan.scripts.mit.edu/blog/backdooring-js/
19
+ For more information, consult:
20
+ * https://zyan.scripts.mit.edu/blog/backdooring-js
21
+
22
+ * CWE: 254 - 7PK - Security Features
23
+ cvss_v2 : 7.5
24
+ cvss_v3 : 9.8
18
25
patched_versions :
19
- - ' >= 2.7.2'
26
+ - ' >= 2.7.2'
27
+ related :
28
+ url :
29
+ - https://nvd.nist.gov/vuln/detail/CVE-2015-8857
30
+ - https://github.com/mishoo/UglifyJS/issues/751
31
+ - https://blog.azuki.vip/backdooring-js
32
+ - https://www.openwall.com/lists/oss-security/2016/04/20/11
33
+ - https://github.com/advisories/GHSA-34r7-q49f-h37c
You can’t perform that action at this time.
0 commit comments