search

vipinsun / blockchain-carbon-accounting

Apache License 2.0
0 stars 0 forks source link

WS-2020-0447 (High) detected in CocoaDebug1.5.6 #149

Open mend-bolt-for-github[bot] opened 2 years ago

mend-bolt-for-github[bot] commented 2 years ago

WS-2020-0447 - High Severity Vulnerability

Vulnerable Library - CocoaDebug1.5.6

iOS Debugging Tool ?

Library home page: https://github.com/CocoaDebug/CocoaDebug.git

Found in HEAD commit: d388e16464e00b9ce84df0d247029f534a429b90

Found in base branch: main

Vulnerable Source Files (1)

/open-offsets-directory/react/node_modules/jsc-android/dist/include/JSCallbackObjectFunctions.h

Vulnerability Details

In Safari’s WebKit, versions Safari-536.11 through Safari-610.1.16.3 are vulnerable to an infinite loop, due to an unreachable exit condition in JSCallbackObject::deleteProperty when propertyName is an index. This causes the app to consume excessive resources and eventually cause DoS.

Publish Date: 2020-06-11

URL: WS-2020-0447

CVSS 3 Score Details (7.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2020-06-11

Fix Resolution: Safari-610.1.17

Step up your Open Source Security Game with Mend here