Vulnerabilities > CVE-2021-23444 - Type Confusion vulnerability in Client Jointjs

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
client
CWE-843
NVD
Published: 2021-09-21
Updated: 2021-10-02

Summary

This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.

Vulnerable Configurations

Part Description Count
Application
Client
1

Common Weakness Enumeration (CWE)

References