In addition to regular vulnerability data research, the Sonatype Security Research Team also contributes to the open-source community by going the extra mile when we discover flaws that were previously not reported. Recall, earlier this year when our team had discovered they could bypass a fix made to the SheetJS project. We took immediate steps to collaborate with the project developers, responsibly disclosing the details of the bypass, and working with them on rolling out a new fix. Consequently, we helped protect our customers by incorporating this newly discovered information into our data.
The post CVE-2020-17479: The return of Validation Bypass (CVE-2019-19507) in `jpv` appeared first on Security Boulevard.
https://www.malwaredevil.com/2020/08/11/cve-2020-17479-the-return-of-validation-bypass-cve-2019-19507-in-jpv/?utm_source=rss&utm_medium=rss&utm_campaign=cve-2020-17479-the-return-of-validation-bypass-cve-2019-19507-in-jpv

No comments:
Post a Comment