Description

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

Remediation

References

http://www.securityfocus.com/bid/104655

http://www.securitytracker.com/id/1041268

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8319

Related Vulnerabilities

CVE-2019-19771 Vulnerability in npm package commandre

CVE-2021-21252 Vulnerability in maven package org.webjars:jquery-validation

CVE-2023-26111 Vulnerability in npm package node-static

CVE-2020-28481 Vulnerability in maven package org.webjars.npm:socket.io

CVE-2023-26486 Vulnerability in npm package vega

Severity

Critical

Classification

CWE-682 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory VDB Entry Patch Vendor Advisory