Lucene search
GoogleOSV:CVE-2023-26919HistoryApr 10, 2023 - 4:15 p.m.
CVE-2023-26919
2023-04-1016:15:07
Google
osv.dev
4
cve-2023-26919
software vulnerability
sandbox escape
nashorn-sandbox
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS
0.001
Percentile
24.8%
delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.
Related
prion
prion
Code injection
2023-04-10 16:15:00
cve
cve
CVE-2023-26919
2023-04-10 16:15:07
veracode
veracode
Sandbox Bypass
2023-04-17 06:12:44
cvelist
cvelist
CVE-2023-26919
2023-04-10 00:00:00
nvd
nvd
CVE-2023-26919
2023-04-10 16:15:07
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS
0.001
Percentile
24.8%
Related for OSV:CVE-2023-26919