Code injection

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

espruino

code injection

vulnerability

jswrap_function_replacewith

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%

JSON

An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswrap_function_replacewith endpoint.

CPENameOperatorVersion
espruinoeq2019628.0.0

CPE	Name	Operator	Version
	espruino	eq	2019628.0.0

References

github.com/espruino/Espruino/issues/1684