Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS05M2M3LTI5NDItM2g0N84AAU7a

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

Permalink: https://github.com/advisories/GHSA-93c7-2942-3h47
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05M2M3LTI5NDItM2g0N84AAU7a
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: about 1 year ago

CVSS Score: 4.2
CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Identifiers: GHSA-93c7-2942-3h47, CVE-2018-8315
References:

• https://nvd.nist.gov/vuln/detail/CVE-2018-8315
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8315
• https://github.com/chakra-core/ChakraCore/pull/5688
• https://github.com/chakra-core/ChakraCore/commit/e03b3e30160ac5846b246931634962ce6bd1db83
• https://web.archive.org/web/20210124203128/http://www.securityfocus.com/bid/105251
• https://web.archive.org/web/20211206083609/https://securitytracker.com/id/1041623
• https://github.com/advisories/GHSA-93c7-2942-3h47

Repository: https://github.com/chakra-core/ChakraCore
Blast Radius: 1.0

Affected Packages