admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-05-06 18:53:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2022-07-13 09:00:43 +00:00
parent f0d546786e
commit 3f8168b0aa
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
2019/10xxx/CVE-2019-10761.json
View File

@ -48,16 +48,19 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-VM2-473188"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-VM2-473188",
"name": "https://snyk.io/vuln/SNYK-JS-VM2-473188"
},
{
"refsource": "CONFIRM",
"url": "https://github.com/patriksimek/vm2/issues/197"
"refsource": "MISC",
"url": "https://github.com/patriksimek/vm2/issues/197",
"name": "https://github.com/patriksimek/vm2/issues/197"
},
{
"refsource": "CONFIRM",
"url": "https://github.com/patriksimek/vm2/commit/4b22d704e4794af63a5a2d633385fd20948f6f90"
"refsource": "MISC",
"url": "https://github.com/patriksimek/vm2/commit/4b22d704e4794af63a5a2d633385fd20948f6f90",
"name": "https://github.com/patriksimek/vm2/commit/4b22d704e4794af63a5a2d633385fd20948f6f90"
}
]
},
@ -65,7 +68,7 @@
"description_data": [
{
"lang": "eng",
"value": "This affects the package vm2 before 3.6.11.\n It is possible to trigger a RangeError exception from the host rather than the \"sandboxed\" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code running the script allowing it to spawn a child_process and execute arbitrary code.\r\n\r\n"
"value": "This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the \"sandboxed\" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code running the script allowing it to spawn a child_process and execute arbitrary code."
}
]
},