Lucene search
Veracode Vulnerability DatabaseVERACODE:29547HistoryMar 03, 2021 - 2:54 a.m.
Sandbox Restrictions Bypass
2021-03-0302:54:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
38.4%
matrix-react-sdk is vulnerable to sandbox restrictions bypass. The vulnerability exists due to the redundant lockOrigin parameter from usercontent, allowing an attacker to use the user content sandbox to trick users into opening unexpected documents with a blob origin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| matrix-react-sdk | le | 3.14.0 |
Related
prion
prion
Code injection
2021-03-02 03:15:00
cvelist
cvelist
cve
cve
CVE-2021-21320
2021-03-02 03:15:13
osv
osv
CVE-2021-21320
2021-03-02 03:15:13
User content sandbox can be confused into opening arbitrary documents
2021-03-03 02:23:56
nodejs
nodejs
Sandbox Breakout
2021-03-03 02:27:35
github
github
User content sandbox can be confused into opening arbitrary documents
2021-03-03 02:23:56
nvd
nvd
CVE-2021-21320
2021-03-02 03:15:13