76 matches found
cve-2024-21534
POC - CVE-2024-21534 Jsonpath-plus vulnerable a la Ejecución Remota de Código RCE debido a una sanitización inadecuada de la entrada Resumen CVE-2024-21534 es una vulnerabilidad crítica encontrada en versiones del paquete jsonpath-plus anteriores a la versión 10.0.0. La vulnerabilidad se debe a u...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus PoC de RCE Nombre del script PoC: poc.py Un script de explotación de prueba de concepto para CVE-2025-1302, que apunta a una vulnerabilidad de RCE en la librería jsonpath-plus. Cuando se ejecuta contra un endpoint de servicio vulnerable, el script intenta desencadenar ...
JSONPath
véase también licencias para dependencias de desarrollo JSONPath Plus Analiza, transforma y extrae selectivamente datos de documentos JSON y objetos JavaScript. jsonpath-plus amplía la especificación original para añadir algunos operadores adicionales y hace explícitos algunos comportamientos que...
CVE-2025-1302
CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Configuración del laboratorio docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000 Descripción Las version...
CVE-2024-21534
CVE-2024-21534: Vulnerabilidad de Ejecución Remota de Código en jsonpath-plus =10.0.7 Resumen Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad crítica de Ejecución Remota de Código RCE en el paquete jsonpath-plus, que afecta a versiones anteriores a la 10.0.7...
JSONPath Plus < 10.3.0 - Remote Code Execution
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution RCE due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. Note: This is caused by an incomplete fix for...
CLSA-2026-1791290343 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 4.0.0-tuxcare.1...
CVE-2024-21534-poc
漏洞: CVE-2024-21534 严重性: 严重 CVSS 评分: 9.8 描述: jsonpath-plus 包（版本 = 10.0.7）存在一个远程代码执行 RCE 漏洞，攻击者能够通过 Node.js 的 VM 模块执行任意代码。此漏洞由输入验证不足导致，影响 10.0.7 及以下版本。 影响: 成功利用此漏洞可能导致受影响的系统完全沦陷。 缓解措施: 1. 升级jsonpath-plus： 更新至 10.0.8 或更高版本。 2. 输入验证： 对 JSONPath 表达式实施严格的输入验证，防止恶意输入。 3. VM 模块使用： 尽量减少 VM 模块的使用，并严格控制其执行环...
ROOT-APP-NPM-CVE-2024-21534 CVE-2024-21534 in jsonpath-plus - Patched by Root
Root has patched CVE-2024-21534 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
JSONPath v10.4.1
see also licenses for dev. deps. JSONPath Plus Analyse, transform, and selectively extract data from JSON documents and JavaScript objects. jsonpath-plus expands on the original specification to add some additional operators and makes explicit some behaviors the original did not spell out. Try th...
ROOT-APP-NPM-CVE-2025-1302 CVE-2025-1302 in jsonpath-plus - Patched by Root
Root has patched CVE-2025-1302 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2024-10345 AIKIDO-2024-10345 in jsonpath-plus - Patched by Root
Root has patched AIKIDO-2024-10345 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
PT-2026-76492
Root has patched AIKIDO-2024-10345 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
CLSA-2026-1780966312 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 6.0.1-tuxcare.1...
CLSA-2026-1780966310 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 5.1.0-tuxcare.1...
CLSA-2026-1774657375 TuxCare security update for jsonpath-plus (1 CVE)
TuxCare rebuilt jsonpath-plus to address 1 CVE. Fixed in 7.2.0-tuxcare.2...
CLSA-2026-1774657371 TuxCare security update for jsonpath-plus (2 CVEs)
TuxCare rebuilt jsonpath-plus to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...
PT-2026-74172
TuxCare rebuilt jsonpath-plus to address 1 CVE. Fixed in 7.2.0-tuxcare.2...