Description (CNA)
JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / JSDom | affected JSDom 16.4.0 |
CWE
No CWE identifiers supplied.
References
- https://www.tenable.com/security/research/tra-2021-05
- https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951
ADP enrichment
No English description supplied.