Lucene search

K

Jsen Project Security Vulnerabilities

cve
cve

CVE-2020-7777

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In...

7.2CVSS

7AI Score

0.002EPSS

2020-11-23 04:15 PM
21