CVE-2021-22567

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.

• CWE-284

• https://github.com/dart-lang/sdk/blob/main/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41Patch, Third Party Advisory
• https://github.com/dart-lang/sdk/blob/main/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41Patch, Third Party Advisory

Published

Jan 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22557SLO generator allows for loading of YAML files that if craft…7.8
• CVE-2021-2256Vulnerability in the Oracle Storage Cloud Software Appliance…10
• CVE-2021-22563Invalid JPEG XL images using libjxl can cause an out of boun…4.4
• CVE-2021-22564For certain valid JPEG XL images with a size slightly larger…5.5
• CVE-2021-22565An attacker could prematurely expire a verification code, ma…6.5
• CVE-2021-22566An incorrect setting of UXN bits within mmu_flags_to_s1_pte_…9.8
• CVE-2021-22568When using the dart pub publish command to publish a package…8.8
• CVE-2021-22569An issue in protobuf-java allowed the interleaving of com.go…5.5
• CVE-2021-2257Vulnerability in the Oracle Storage Cloud Software Appliance…4.1
• CVE-2021-22570Nullptr dereference when a null char is present in a proto s…5.5
• CVE-2021-22571A local attacker could read files from some other users' SA3…5.5
• CVE-2021-22572On unix-like systems, the system temporary directory is shar…5.5