Arbitrary Code Injection

🗓️ 07 May 2024 10:25:08Reported by SnykType

Arbitrary code injection in ngx-extended-pdf-viewer via font_loader.js code evaluation; disable isEvalSupported or upgrade to version twenty point zero point two or higher.

Reporter	Title	Published	Views	Family All 331
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	20 May 202410:02	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	1 May 202610:40	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	20 May 202422:56	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	16 May 202507:19	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	22 Aug 202505:51	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	28 Jun 202517:46	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	27 Jul 202610:59	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	13 Jun 202415:14	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	25 Mar 202516:27	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox	25 Jun 202607:44	–	githubexploit

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-94.html
security	www.security.snyk.io/vuln/SNYK-JS-NGXEXTENDEDPDFVIEWER-11790310

23 Jan 2025 01:13Current

7.6High risk

Vulners AI Score7.6

CVSS 3.15.6 - 8.8

EPSS0.72648

SSVC