CVE-2021-20066

5.6

MEDIUMCVSS v3

Published

February 16, 2021

CVSS v2

6.8 MEDIUM

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.

jsdom

NPMA JavaScript implementation of many web standards

all versionsNVD

jsdom/jsdom

GitHubA JavaScript implementation of various web standards, for use with Node.js

all versionsNVD

@types/jsdom

NPM

More on this CVE

NVD↗GitHub Advisory↗

TypeScript definitions for jsdom

all versionsNVD

@forbeslindesay/jsdom

NPMA JavaScript implementation of many web standards

all versionsNVD

tmpvar/jsdom

GitHub

all versionsNVD

@applitools/jsdom

NPMjsdom without canvas 19.0.0

all versionsNVD

Security Advisories

CVE-2021-20066

Description

More on this CVE