What is GHSA-xgcc-r2f3-rq6p?

GHSA-xgcc-r2f3-rq6p is a security advisory published by GitHub Security Advisories with Medium severity. ChakraCore information disclosure vulnerability

Which CVE IDs does GHSA-xgcc-r2f3-rq6p cover?

GHSA-xgcc-r2f3-rq6p covers the following CVE IDs: CVE-2018-0939. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xgcc-r2f3-rq6p?

GHSA-xgcc-r2f3-rq6p has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-xgcc-r2f3-rq6p?

GHSA-xgcc-r2f3-rq6p affects 1 product, including: nuget/Microsoft.ChakraCore:\u003c 1.8.2.

GHSA-xgcc-r2f3-rq6pMediumCVSS 4.3

ChakraCore information disclosure vulnerability

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

October 5, 2023

🔗 CVE IDs covered (1)

CVE-2018-0939 →

📋 Description

ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.

🎯 Affected products1

nuget/Microsoft.ChakraCore:< 1.8.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-0939
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0939
https://github.com/chakra-core/ChakraCore/commit/090277e7a5ea1d938777acb92e7b6759936ea974
https://web.archive.org/web/20201021051922/http://www.securitytracker.com/id/1040507
https://web.archive.org/web/20210124145017/http://www.securityfocus.com/bid/103305
https://github.com/advisories/GHSA-xgcc-r2f3-rq6p