CVE-2021-4229 ua-parser-js Crypto Mining backdoor
A malicious backdoor in the ua-parser-js library enables unauthorized cryptocurrency mining and code execution on affected systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-4229?
CVE-2021-4229 is a medium-severity vulnerability in unspecified ua-parser-js, published on 24 May 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.
Which versions are affected by CVE-2021-4229?
6 open source packages ship an affected version, including ua-parser-js. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
ua-parser-js npm | From 0.7.29 | 0.7.30 |
ua-parser-js npm | From 0.7.29 | 0.7.30 |
ua-parser-js npm | From 0.8.0 | 0.8.1 |
ua-parser-js npm | From 0.8.0 | 0.8.1 |
ua-parser-js npm | From 1.0.0 | 1.0.1 |
ua-parser-js npm | From 1.0.0 | 1.0.1 |
Products include Ua-Parser-Js Project Ua-Parser-Js.
How do I fix CVE-2021-4229?
Upgrade ua-parser-js to a fixed version for your release line: 0.7.30, 0.8.1 or 1.0.1.
Is CVE-2021-4229 being exploited?
There is no known exploitation of CVE-2021-4229 in the wild and no public exploit code.
Other vulnerabilities in unspecified ua-parser-js
Sources
Also known as GHSA-pjwm-rvh2-c87w.