CVE-2021-33420: Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

replicator 代码问题漏洞

replicator is an advanced JavaScript object serialization library by the individual developer Ivan Nikulin. A security vulnerability exists in replicator versions prior to 1.0.4. An attacker could exploit this vulnerability to execute arbitrary code via the fromSerializable function in a TypedArr...

PT-2022-10232 · Unknown · Inikulin Replicator

Name of the Vulnerable Software and Affected Versions: inikulin replicator versions prior to 1.0.4 Description: A deserialization issue in the inikulin replicator allows remote attackers to run arbitrary code via the fromSerializable function in the TypedArray object. Recommendations: For version...