Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39593
HistoryMar 08, 2023 - 12:59 p.m.

Arbitrary Code Execution

2023-03-0812:59:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
arbitrary code execution
jsonlogic function
logic.js
prototype pollution
operations object
software security

0.001 Low

EPSS

Percentile

47.9%

json-logic-js is vulnerable to Arbitrary Code Execution. The vulnerability exists in the jsonLogic function of logic.js due to improper sanitization to prevent prototype pollution in the operations object, which allows an attacker to execute malicious code on the system.

0.001 Low

EPSS

Percentile

47.9%

Related for VERACODE:39593