1 matches found
Qwik vulnerable to Unauthenticated RCE via server$ Deserialization
Summary qwik =1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP request. Affects any deployment where require is available at runtime. Impact -...
9.8CVSS6.5AI score0.05416EPSS
SaveExploits1References4Affected Software1
20