Lucene search
PRIOn knowledge basePRION:CVE-2023-37903HistoryJul 21, 2023 - 8:15 p.m.
Remote code execution
2023-07-2120:15:00
PRIOn knowledge base
www.prio-n.com
14
node.js
sandbox
vulnerability
remote code execution
alternative software
vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect function allows attackers to escape the sandbox and run arbitrary code. This may result in Remote Code Execution, assuming the attacker has arbitrary code execution primitive inside the context of vm2 sandbox. There are no patches and no known workarounds. Users are advised to find an alternative software.
Related
cve
cve
CVE-2023-37903
2023-07-21 20:15:16
redhatcve
redhatcve
CVE-2023-37903
2023-07-25 08:51:18
githubexploit
githubexploit
Exploit for OS Command Injection in Vm2 Project Vm2
2023-11-05 11:23:15
osv
osv
CVE-2023-37903
2023-07-21 20:15:16
vm2 Sandbox Escape vulnerability
2023-07-13 17:01:58
nvd
nvd
CVE-2023-37903
2023-07-21 20:15:16
cvelist
cvelist
CVE-2023-37903 Sandbox Escape in vm2
2023-07-21 19:42:09
ibm
ibm
github
github
vm2 Sandbox Escape vulnerability
2023-07-13 17:01:58
openvas
openvas
vm2 <= 3.9.19 Multiple Sandbox Escape Vulnerabilities (Jul 2023)
2023-07-14 00:00:00
redhat
redhat