File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11---
22gem : uglifier
3+ cve : 2015-8857
34osvdb : 126747
5+ ghsa : 34r7-q49f-h37c
46url : https://github.com/mishoo/UglifyJS2/issues/751
57title : uglifier incorrectly handles non-boolean comparisons during minification
68date : 2015-07-21
@@ -14,6 +16,18 @@ description: |2
1416 to allow potentially malicious code to be hidden within secure code,
1517 and activated by the minification process.
1618
17- For more information, consult: https://zyan.scripts.mit.edu/blog/backdooring-js/
19+ For more information, consult:
20+ * https://zyan.scripts.mit.edu/blog/backdooring-js
21+
22+ * CWE: 254 - 7PK - Security Features
23+ cvss_v2 : 7.5
24+ cvss_v3 : 9.8
1825patched_versions :
19- - ' >= 2.7.2'
26+ - ' >= 2.7.2'
27+ related :
28+ url :
29+ - https://nvd.nist.gov/vuln/detail/CVE-2015-8857
30+ - https://github.com/mishoo/UglifyJS/issues/751
31+ - https://blog.azuki.vip/backdooring-js
32+ - https://www.openwall.com/lists/oss-security/2016/04/20/11
33+ - https://github.com/advisories/GHSA-34r7-q49f-h37c
You can’t perform that action at this time.
0 commit comments