Lucene search
Veracode Vulnerability DatabaseVERACODE:22138HistoryDec 09, 2019 - 8:28 a.m.
Remote Code Execution (RCE)
2019-12-0908:28:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
53.4%
vm2 is vulnerable to remote code execution (RCE). The attack is possible due to the generation of RangeError when a Maximum call stack size is exceeded during the sandboxing of the evaluation of code used within the eval function.
Related
githubexploit
githubexploit
Exploit for Uncontrolled Recursion in Vm2 Project Vm2
2020-12-01 09:18:57
cvelist
cvelist
CVE-2019-10761 Sandbox Bypass
2022-07-13 00:00:00
github
github
vm2 before 3.6.11 vulnerable to sandbox escape
2022-07-14 00:00:23
cve
cve
CVE-2019-10761
2022-07-13 09:15:08
prion
prion
Code injection
2022-07-13 09:15:00
osv
osv
vm2 before 3.6.11 vulnerable to sandbox escape
2022-07-14 00:00:23
CVE-2019-10761
2022-07-13 09:15:08
nvd
nvd
CVE-2019-10761
2022-07-13 09:15:08