Arbitrary Code Execution

2021-01-0506:05:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

75.0%

JSON

djv is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary Javascript code on the host OS by controlling the schema file.

CPENameOperatorVersion
djvle2.1.3-alpha.0

CPE	Name	Operator	Version
	djv	le	2.1.3-alpha.0

References

github.com/korzio/djv/blob/master/lib/utils/properties.js%23L55

github.com/korzio/djv/pull/98

github.com/korzio/djv/pull/98/files

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for VERACODE:28895