Lucene search
PRIOn knowledge basePRION:CVE-2020-15262HistoryOct 19, 2020 - 8:15 p.m.
Input validation
2020-10-1920:15:00
PRIOn knowledge base
www.prio-n.com
9
In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected. This issue is patched in version 1.5.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webpack-subresource-integrity | lt | 1.5.1 |
Related
nvd
nvd
CVE-2020-15262
2020-10-19 20:15:12
osv
osv
CVE-2020-15262
2020-10-19 20:15:12
Unprotected dynamically loaded chunks
2020-10-19 20:02:44
cve
cve
CVE-2020-15262
2020-10-19 20:15:12
veracode
veracode
Subresource Integrity Bypass
2020-10-20 05:17:49
Lack Of Integrity Hash Validation
2020-10-20 01:33:29
cvelist
cvelist
CVE-2020-15262 Invalid integrity hashes in webpack-subresource-integrity
2020-10-19 20:10:18
github
github
Unprotected dynamically loaded chunks
2020-10-19 20:02:44