Vulnerability · Published Dec 11, 2020 · Assigned by snyk
CVE-2020-7791Denial of Service (DoS)
High 7.5
In plain English
A high-severity security flaw in i18n. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.0% (higher than 87% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.0%top 12.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| NuGet | i18n | 2.1.15 | GHSA-hfvc-g252-rp4g |
Affected products (as reported)
References
- https://snyk.io/vuln/SNYK-DOTNET-I18N-1050179 x_refsource_MISC
- https://github.com/turquoiseowl/i18n/issues/387 x_refsource_MISC
- https://github.com/turquoiseowl/i18n/commit/c418e3345313dc896c1951d8c46ab0b9b12fcbd3 x_refsource_MISC
- [myfaces-dev] 20210506 [GitHub] [myfaces-tobago] lofwyr14 opened a new pull request #821: build: CVE fix mailing-list, x_refsource_MLIST
- [druid-commits] 20210506 [GitHub] [druid] jihoonson commented on a change in pull request #11215: Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210506 [GitHub] [druid] maytasm opened a new pull request #11215: Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210506 [GitHub] [druid] maytasm merged pull request #11215: Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210506 [GitHub] [druid] maytasm commented on a change in pull request #11215: Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210506 [GitHub] [druid] clintropolis opened a new pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210507 [GitHub] [druid] clintropolis commented on pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210507 [GitHub] [druid] clintropolis merged pull request #11217: [Backport] Suppressing false positive CVE-2020-7791 mailing-list, x_refsource_MLIST
- [druid-commits] 20210507 [druid] branch 0.21.1 updated: Suppressing false positive CVE-2020-7791 (#11215) (#11217) mailing-list, x_refsource_MLIST