CVE-2020-7791GHSA-HFVC-G252-RP4GSNYK-DOTNET-I18N-1050179
Denial of Service (DoS)
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 2.1.15
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a i18n
fixed in 2.1.15
- i18nNuGet
fixed in 2.1.15
References 12
GitHub · turquoiseowl/i18n
lists.apache.org
- thread.html/rc2abba7aa0450198494bbee654fce9b97fad72a4989323e189faede4@<dev.myfaces.apache.org>
- thread.html/r33dc233634aedb04fa77db3eb79ea12d15ca4da89fa46a1c585ecb0b@<commits.druid.apache.org>
- thread.html/r9744574911e7e4edf5f4eeae92a4ccc83e3723cec937950062bb8775@<commits.druid.apache.org>
- thread.html/r394b1ae54693609a60ea8aab02ff045dc92f593aa3aebff562e69958@<commits.druid.apache.org>
- thread.html/r2667286c8ceffaf893b16829b9612d8f7c4ee6b30362c6c1b583e3c2@<commits.druid.apache.org>
- thread.html/ra5047392edf1fecba441c9adc8807ed6c5f7d2cc71f2f3bb89f35371@<commits.druid.apache.org>
- thread.html/rc850d0fce066f9eb9e8553172d9207bad7df4d2059d93abc5c7e85c4@<commits.druid.apache.org>
- thread.html/r1573c58dc283b05f7a40a3f5ff0079b5bbde0492d406ee0fe98d40b6@<commits.druid.apache.org>
- thread.html/r5e08837e695efd36be73510ce58ec05785dbcea077819d8acc2d990d@<commits.druid.apache.org>