CVE-2021-23344

2021-03-0417:15:13

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.1%

JSON

The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set.

CPENameOperatorVersion
frameworkeq1.9.1
frameworkeq1.2.3
frameworkeq2.9.1
frameworkeq1.9.6
frameworkeq2.1.0
frameworkeq2.2.0
frameworkeq1.7.2
frameworkeq1.0.0
frameworkeq3.4.4
frameworkeq2.9.0

Name	Operator	Version
framework	eq	1.9.1
framework	eq	1.2.3
framework	eq	2.9.1
framework	eq	1.9.6
framework	eq	2.1.0
framework	eq	2.2.0
framework	eq	1.7.2
framework	eq	1.0.0
framework	eq	3.4.4
framework	eq	2.9.0