4.6
Moyenne
CVE-2021-22567 Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be…
Description
Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dart SDK 2.15 | premières → < 2.15.0-268.18.beta | 2.15.0-268.18.beta |
Autres CVE de Dart SDK
Les 4 CVE de Dart SDK →
CVE-2022-0451
Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin…
6.5
Moyenne
CVE-2021-22568
When using the dart pub publish command to publish a package to a third-party package server, the request would be…
8.8
Élevée
CVE-2021-22540
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering
Non notée