2 matches found
Improper access control
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox...
10CVSS9.4AI score0.03494EPSS
SaveExploits0References3Affected Software1
CVE-2017-16088: Externally Controlled Reference to a Resource in Another Sphere
The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox...
10CVSS8.2AI score0.03494EPSS
SaveExploits0References2
20