Lucene search
+L

1 matches found

OSV
OSV
added 2022/02/10 8:18 p.m.43 views

GHSA-VM64-CFQX-3698 Code Injection in jsen

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so it is assumed that this is applicable. I...

7.2CVSS7.2AI score0.02026EPSS
SaveExploits1References3
Rows per page
Query Builder