Lucene search
+L

3 matches found

OSV
OSV
added 2022/08/18 7:15 p.m.92 views

GHSA-J3RV-W43Q-F9X2 React Editable Json Tree vulnerable to arbitrary code execution via function parsing

Impact Our library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function was used to execute strings that begin with "function" as Javascript. This was an oversight that unfortunately allows arbitrary code to be...

10CVSS9.3AI score0.01421EPSS
SaveExploits1References4
Rows per page
Query Builder