CVE-2021-23389

2021-07-1216:15:08

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

JSON

The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

CPENameOperatorVersion
frameworkeq1.9.1
frameworkeq1.2.3
frameworkeq2.9.1
frameworkeq1.9.6
frameworkeq2.1.0
frameworkeq2.2.0
frameworkeq1.7.2
frameworkeq1.0.0
frameworkeq3.4.4
frameworkeq2.9.0

Name	Operator	Version
framework	eq	1.9.1
framework	eq	1.2.3
framework	eq	2.9.1
framework	eq	1.9.6
framework	eq	2.1.0
framework	eq	2.2.0
framework	eq	1.7.2
framework	eq	1.0.0
framework	eq	3.4.4
framework	eq	2.9.0