Lucene search

K
redhatcveRedhat.comRH:CVE-2023-39333
HistoryOct 16, 2023 - 4:50 p.m.

CVE-2023-39333

2023-10-1616:50:07
redhat.com
access.redhat.com
9
malicious export names
webassembly module
javascript code
unauthorized access

9.2 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module.