CVE-2018-8319 Sensitive Data Exposure in msrcrypto
CriticalCVSS 9.8
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm msrcrypto(npm) | < 1.4.1 | 1.4.1 |
| Microsoft research javascript cryptography library | = 1.4 | No fix listed |
| Microsoft Research JavaScript Cryptography Library | = Microsoft Research JavaScript Cryptography Library | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com
- portal.msrc.microsoft.com patch vendor-advisory
- www.npmjs.com
- 104655 third-party-advisory vdb-entry
- 1041268 third-party-advisory vdb-entry