CVE-2019-12966

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

CVE-2019-12966

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

CVE-2019-12966

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

Format string

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

CVE-2019-12966

FeHelper extension (through 2019-06-19) is reported to permit arbitrary code execution during a JSON format operation, demonstrated by the payload {"a":(function(){confirm(1)})()}. Affected software: FeHelper (browser extension) as of the cited timeframe. Root cause: JSON formatting operation lea...

CVE-2019-12966

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

CVE-2019-12966: Improper Neutralization of Special Elements in Output Used by a Downstream Component

FeHelper through 2019-06-19 allows arbitrary code execution during a JSON format operation, as demonstrated by the "a":functionconfirm1 input...

PT-2019-13058

Name of the Vulnerable Software and Affected Versions FeHelper versions prior to 2019-06-20 Description The issue allows arbitrary code execution during a JSON format operation. This can be demonstrated by the input "a":functionconfirm1. Recommendations For FeHelper versions prior to 2019-06-20,...