Lucene search
Veracode Vulnerability DatabaseVERACODE:27628HistoryOct 20, 2020 - 5:17 a.m.
Subresource Integrity Bypass
2020-10-2005:17:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
36.9%
webpack-subresource-integrity is vulnerable to subresource integrity bypass. Dynamically injected tags use undefined and the integrity check can be bypassed, potentially resulting in cross-site scripting attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| webpack-subresource-integrity | eq | 1.5.0 | |
| webpack-subresource-integrity | eq | 1.5.0 |
Related
prion
prion
Input validation
2020-10-19 20:15:00
veracode
veracode
Lack Of Integrity Hash Validation
2020-10-20 01:33:29
osv
osv
CVE-2020-15262
2020-10-19 20:15:12
Unprotected dynamically loaded chunks
2020-10-19 20:02:44
cve
cve
CVE-2020-15262
2020-10-19 20:15:12
nvd
nvd
CVE-2020-15262
2020-10-19 20:15:12
cvelist
cvelist
CVE-2020-15262 Invalid integrity hashes in webpack-subresource-integrity
2020-10-19 20:10:18
github
github
Unprotected dynamically loaded chunks
2020-10-19 20:02:44