CVE-2020-15262

LOW Year: 2020
CVSS v3 Score
3.7
Low
CVSS v2 Score
5.0
Medium
Weakness Type
CWE-345
View all →

Vulnerability Description

In webpack-subresource-integrity before version 1.5.1, all dynamically loaded chunks receive an invalid integrity hash that is ignored by the browser, and therefore the browser cannot validate their integrity. This removes the additional level of protection offered by SRI for such chunks. Top-level chunks are unaffected. This issue is patched in version 1.5.1.

Related Vulnerabilities

CVE-2019-20057

LOW
CVSS:3.7(Low)

com.proxyman.NSProxy.HelperTool in Privileged Helper Tool in Proxyman for macOS 1.11.0 and earlier allows an attacker to change the System Proxy and redirect all traffic to an attacker-controlled comp...

CWE-3452019

CVE-2025-5320

MEDIUM
CVSS:3.7(Low)

A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument lo...

CWE-3452025

CVE-2017-1773

MEDIUM
CVSS:4.0(Medium)

IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform DNS cache poisoning and redirect Internet traffic. IBM X-Forc...

CWE-3452017

CVE-2019-1667

MEDIUM
CVSS:4.0(Medium)

A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insuff...

CWE-3452019

CVE-2017-2701

LOW
CVSS:3.3(Low)

Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting ...

CWE-3452017

CVE-2018-15801

LOW
CVSS:3.3(Low)

Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, the same private key for an honest issuer and a malic...

CWE-3452018