CVE-2021-4229CWE-912

ua-parser-js Crypto Mining backdoor

Medium · published May 24, 2022

CVSS v3.1
5.0
EPSS
2%
Percentile
74.4
In the wild
Unconfirmed
What it is

A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01518 · 74.4th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2022-05-24T15:30Z
EPSS history
Timeline
  • 24 MAY 15:30Z
    ua-parser-js Crypto Mining backdoor
    cvelistv5