Lucene search

K
osvGoogleOSV:GHSA-J665-RVJ7-2JV9
HistoryMay 17, 2021 - 9:00 p.m.

Code Injection in mosc

2021-05-1721:00:17
Google
osv.dev
14
mosc
arbitrary code execution
user input
eval function
software

EPSS

0.015

Percentile

87.0%

mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to properties argument is executed by the eval function, resulting in code execution.

EPSS

0.015

Percentile

87.0%

Related for OSV:GHSA-J665-RVJ7-2JV9