CVE-2023-2583

creationtimestamp| type| source ---|---|--- 2023-05-08 20:37:46+00:00| seen| https://t.me/cibsecurity/63450...

CVE-2023-2583

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3...

CVE-2023-2583 Code Injection in jsreport/jsreport

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3...

CVE-2023-2583 Code Injection in jsreport/jsreport

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3...

CVE-2023-2583

CVE-2023-2583 affects jsreport/jsreport prior to 3.11.3. The root cause is a hardcoded vulnerable vm2 version in the jsreport-core package’s package.json, enabling code injection. Reported impact is code execution with high severity; in practice, exploitation appears tied to the vulnerable vm2 in...