Bot Framework SDK Information Disclosure Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Microsoft/Bot Framework SDK for JavaScriptv5

  cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:javascript:*:*

  Range: 4.0.0
• Microsoft/Azure Bot Framework SDKcpe-rescue

  cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:.net_framework:*:*

  Range: 4.0.0
• Microsoft/Bot Framework SDK for Pythonv5

  cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:python:*:*

  Range: 4.0.0
• ghsa-coords

  pkg:npm/botframework-connector

  Range: >= 4.7.0, < 4.7.3

• github.com/advisories/GHSA-fvcj-hvfw-7f2vghsaADVISORY
• msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1725mitrevendor-advisory
• nvd.nist.gov/vuln/detail/CVE-2021-1725ghsaADVISORY
• aka.ms/SkillClaimsValidationJavascriptghsaWEB
• github.com/microsoft/botbuilder-js/security/advisories/GHSA-fvcj-hvfw-7f2vghsaWEB
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1725ghsaWEB
• www.npmjs.com/package/botframework-connectorghsaWEB

No linked articles in our index yet.