Code injection

2022-01-0511:15:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.

CPENameOperatorVersion
dart_software_development_kitlt2.15.0

CPE	Name	Operator	Version
	dart_software_development_kit	lt	2.15.0

References

github.com/dart-lang/sdk/blob/main/CHANGELOG.md

github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41