2 matches found
RCE (Remote Code Execution) @babel/plugin-transform-modules-systemjs Dependency in Jira Service Management Data Center
This High severity RCE Remote Code Execution vulnerability was introduced in versions 10.0.0, 10.1.1, 10.3.20, and 11.3.8 of Jira Service Management Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:...
GHSA-FV7C-FP4J-7GWP @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
Impact Using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. Known affected plugins are: - @babel/plugin-transform-modules-systemjs - @babel/preset-env when using the modules: "systemjs" option, as it delegat...