Privilege escalation

2023-04-0520:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

arbitrary code execution

epub file vulnerability

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file.

CPENameOperatorVersion
readium-jseq0.32.0

CPE	Name	Operator	Version
	readium-js	eq	0.32.0

References

infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss