Lucene search

CVE-2023-32313

🗓️ 15 May 2023 20:09:15Reported by [email protected]Type

vm2 sandbox vulnerability patched in version 3.9.1

Reporter	Title	Published	Views	Family All 17
Cvelist	CVE-2023-32313 Inspect method manipulation in vm2	15 May 202319:45	–	cvelist
OSV	vm2 vulnerable to Inspect Manipulation	17 May 202303:49	–	osv
OSV	CVE-2023-32313	15 May 202320:15	–	osv
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that run designer flows containing Box nodes are vulnerable to security restriction bypass due to [CVE-2023-32313]	1 Jun 202315:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	5 Jul 202318:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	25 Sep 202417:28	–	ibm
CVE	CVE-2023-32313	15 May 202320:15	–	cve
Github Security Blog	vm2 vulnerable to Inspect Manipulation	17 May 202303:49	–	github
Prion	Command injection	15 May 202320:15	–	prion
RedhatCVE	CVE-2023-32313	18 May 202319:16	–	redhatcve

Nvd

Node

vm2_project vm2Range<3.9.18node.js

Source	Link
github	www.github.com/patriksimek/vm2/commit/5206ba25afd86ef547a2c9d48d46ca7a9e6ec238
gist	www.gist.github.com/arkark/c1c57eaf3e0a649af1a70c2b93b17550
github	www.github.com/patriksimek/vm2/releases/tag/3.9.18
github	www.github.com/patriksimek/vm2/security/advisories/GHSA-p5gc-c584-jj6v

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 May 2023 20:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.3

EPSS0.001

CWE-74