Lucene search
Veracode Vulnerability DatabaseVERACODE:33579HistoryJan 11, 2022 - 5:48 a.m.
Sandbox Bypass
2022-01-1105:48:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
61.7%
realms-shim is vulnerable to sandbox bypass. The vulnerability exists through the ‘realmEvaluate’ function in ‘realm.js’ as its does not properly validate the input, allowing an attacker bypass the sandbox by inject properties into existing construct prototypes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| realms-shim | le | 1.2.2 | |
| realms-shim | le | 1.2.2 |
References
Related
prion
prion
Code injection
2022-01-10 14:10:00
nvd
nvd
CVE-2021-23543
2022-01-10 14:10:16
cvelist
cvelist
CVE-2021-23543 Sandbox Bypass
2022-01-07 00:00:00
osv
osv
Prototype Pollution in realms-shim
2022-01-13 15:00:36
github
github
Prototype Pollution in realms-shim
2022-01-13 15:00:36
cve
cve
CVE-2021-23543
2022-01-10 14:10:16