Lucene search

K
osvGoogleOSV:GHSA-4HV7-3Q38-97M8
HistoryApr 13, 2021 - 3:24 p.m.

Arbitrary code execution in djv

2021-04-1315:24:47
Google
osv.dev
9

0.004 Low

EPSS

Percentile

75.0%

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

CPENameOperatorVersion
djvlt2.1.4

0.004 Low

EPSS

Percentile

75.0%

Related for OSV:GHSA-4HV7-3Q38-97M8