3.5
CVSSv2

CVE-2021-22567

Published: 05/01/2022 Updated: 12/01/2022
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 3.5 | Impact Score: 1.4 | Exploitability Score: 2.1
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dart dart software development kit

Vendor Advisories

A security issue has been found in the Dart Core SDK before version 2150 Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors and code-review tools Exploiting this an attacker could embed source that is invisible to a code reviewer but that modifies the behavior of a program in unexpected ways T ...