Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6830
HistoryJun 20, 2018 - 8:47 a.m.

Arbitrary Code Execution

2018-06-2008:47:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

64.7%

cryo is vulnerable to arbitrary code execution attacks. The attacks is possible when a JSON is deserialised into an object and the JSON contains a function, allowing a malicious user with access to the JSON to execute arbitrary code through the deserialization of the function.

CPENameOperatorVersion
cryole0.0.6

0.002 Low

EPSS

Percentile

64.7%