Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2022/08/15 6:30 p.m.6 views

CVE-2022-36010 Arbitrary code execution via function parsing in react-editable-json-tree

This library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function is used to execute strings that begin with "function" as Javascript. This unfortunately could allow arbitrary code to be executed if it exists as ...

10CVSS9.4AI score0.01233EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/15 6:30 p.m.54 views

CVE-2022-36010 Arbitrary code execution via function parsing in react-editable-json-tree

This library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function is used to execute strings that begin with "function" as Javascript. This unfortunately could allow arbitrary code to be executed if it exists as ...

10CVSS9.5AI score0.01233EPSS
SaveExploits1References2
Rows per page
Query Builder