CVE-2021-23413 - OpenCVE

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Jszip Project	Jszip

Configuration 1 [-]

cpe:2.3:a:jszip_project:jszip:*:*:*:*:*:node.js:*:*

References

Link	Resource
https://github.com/Stuk/jszip/blob/master/lib/object.js%23L88	Broken Link
https://github.com/Stuk/jszip/commit/22357494f424178cb416cdb7d93b26dd4f824b36	Patch Third Party Advisory
https://github.com/Stuk/jszip/pull/766	Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1251499	Exploit Patch Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1251498	Exploit Patch Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JSZIP-1251497	Exploit Patch Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: snyk

Published: 2021-07-25T00:00:00

Updated: 2021-07-25T13:10:12

Reserved: 2021-01-08T00:00:00

Link: CVE-2021-23413

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-07-25T13:15:07.390

Modified: 2021-08-27T15:41:32.273

Link: CVE-2021-23413

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"containers": {"cna": {"affected": [{"product": "jszip", "vendor": "n/a", "versions": [{"lessThan": "3.7.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Dave Holoway"}], "datePublic": "2021-07-25T00:00:00", "descriptions": [{"lang": "en", "value": "This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "Denial of Service (DoS)", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-07-25T13:10:12", "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730", "shortName": "snyk"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://snyk.io/vuln/SNYK-JS-JSZIP-1251497"}, {"tags": ["x_refsource_MISC"], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1251498"}, {"tags": ["x_refsource_MISC"], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1251499"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/Stuk/jszip/blob/master/lib/object.js%23L88"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/Stuk/jszip/commit/22357494f424178cb416cdb7d93b26dd4f824b36"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/Stuk/jszip/pull/766"}], "title": "Denial of Service (DoS)", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "report@snyk.io", "DATE_PUBLIC": "2021-07-25T13:09:20.817640Z", "ID": "CVE-2021-23413", "STATE": "PUBLIC", "TITLE": "Denial of Service (DoS)"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "jszip", "version": {"version_data": [{"version_affected": "<", "version_value": "3.7.0"}]}}]}, "vendor_name": "n/a"}]}}, "credit": [{"lang": "eng", "value": "Dave Holoway"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial of Service (DoS)"}]}]}, "references": {"reference_data": [{"name": "https://snyk.io/vuln/SNYK-JS-JSZIP-1251497", "refsource": "MISC", "url": "https://snyk.io/vuln/SNYK-JS-JSZIP-1251497"}, {"name": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1251498", "refsource": "MISC", "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1251498"}, {"name": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1251499", "refsource": "MISC", "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1251499"}, {"name": "https://github.com/Stuk/jszip/blob/master/lib/object.js%23L88", "refsource": "MISC", "url": "https://github.com/Stuk/jszip/blob/master/lib/object.js%23L88"}, {"name": "https://github.com/Stuk/jszip/commit/22357494f424178cb416cdb7d93b26dd4f824b36", "refsource": "MISC", "url": "https://github.com/Stuk/jszip/commit/22357494f424178cb416cdb7d93b26dd4f824b36"}, {"name": "https://github.com/Stuk/jszip/pull/766", "refsource": "MISC", "url": "https://github.com/Stuk/jszip/pull/766"}]}}}}, "cveMetadata": {"assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730", "assignerShortName": "snyk", "cveId": "CVE-2021-23413", "datePublished": "2021-07-25T00:00:00", "dateReserved": "2021-01-08T00:00:00", "dateUpdated": "2021-07-25T13:10:12", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jszip_project:jszip:*:*:*:*:*:node.js:*:*", "matchCriteriaId": "073AD955-D723-4E1C-963D-A66C0D57C0DB", "versionEndExcluding": "3.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results in a returned object with a modified prototype instance."}, {"lang": "es", "value": "Esto afecta al paquete jszip versiones anteriores a 3.7.0. Dise\u00f1ando un nuevo archivo zip con nombres de archivo ajustados en valores de prototipos de Objetos (por ejemplo, __proto__, toString, etc.) resulta en un objeto devuelto con una instancia de prototipo modificada"}], "id": "CVE-2021-23413", "lastModified": "2021-08-27T15:41:32.273", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "report@snyk.io", "type": "Secondary"}]}, "published": "2021-07-25T13:15:07.390", "references": [{"source": "report@snyk.io", "tags": ["Broken Link"], "url": "https://github.com/Stuk/jszip/blob/master/lib/object.js%23L88"}, {"source": "report@snyk.io", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/Stuk/jszip/commit/22357494f424178cb416cdb7d93b26dd4f824b36"}, {"source": "report@snyk.io", "tags": ["Third Party Advisory"], "url": "https://github.com/Stuk/jszip/pull/766"}, {"source": "report@snyk.io", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1251499"}, {"source": "report@snyk.io", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1251498"}, {"source": "report@snyk.io", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://snyk.io/vuln/SNYK-JS-JSZIP-1251497"}], "sourceIdentifier": "report@snyk.io", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}