CVE-2021-23344 Remote Code Execution (RCE)

The package total.js before 3.4.8 are vulnerable to Remote Code Execution RCE via set...

CVE-2021-23344

Total.js (package total.js) prior to version 3.4.8 is vulnerable to Remote Code Execution via set, as documented in CVE-2021-23344. The vulnerability affects the total.js component (utils/set path) and is confirmed by multiple sources (NVD entry, OpenVAS NASL, and related advisories) indicating a...

CVE-2021-23344

The package total.js before 3.4.8 are vulnerable to Remote Code Execution RCE via set...

@pl-test/c (>=1.1.0 <=1.1.1), @pl-test/e (=1.1.0) +6 more potentially affected by CVE-2021-23344 via total.js (>=3.2.4 <=3.4.13)

total.js NPM version =3.2.4, =1.1.0, =0.3.0, =4.0.0, =1.0.0, =0.0.1, =0.0.4 Source cves: CVE-2021-23344 Source advisory: SNYK:JS-TOTALJS-1077069...