Sandbox Bypass

2023-04-1706:12:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sandbox bypass

vulnerability

validation

terminate

denial of service

software

EPSS

0.001

Percentile

24.8%

JSON

org.javadelight: delight-nashorn-sandbox is vulnerable to Sandbox Bypass. The vulnerability exists due to improper validation in allowExitFunctions which allows an attacker to bypass sandbox protection and terminate the running process, possibly leading to Denial Of Service (DoS).