Lucene search
GoogleOSV:GHSA-PV8X-P9HQ-J328HistoryDec 18, 2017 - 10:27 p.m.
Arbitrary Code Execution in mathjs
2017-12-1822:27:53
Google
osv.dev
6
EPSS
0.002
Percentile
64.7%
math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.
Recommendation
Upgrade to version 3.17.0 or later.
Related
cve
cve
CVE-2017-1001003
2017-11-27 14:29:00
veracode
veracode
Unauthorized Constructor Replacement
2017-11-28 06:11:20
nodejs
nodejs
Arbitrary Code Execution
2017-12-06 04:27:25
github
github
Arbitrary Code Execution in mathjs
2017-12-18 22:27:53
prion
prion
Code injection
2017-11-27 14:29:00
osv
osv
CVE-2017-1001003
2017-11-27 14:29:00
cvelist
cvelist
CVE-2017-1001003
2017-11-27 14:00:00
nvd
nvd
CVE-2017-1001003
2017-11-27 14:29:00