Lucene search
MitreCVELIST:CVE-2013-4660HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-4660
2022-10-0316:14:58
mitre
www.cve.org
cve-2013-4660
remote code execution
node.js
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.
Related
prion
prion
Code injection
2013-06-28 14:55:00
packetstorm
packetstorm
Nodejs js-yaml load() Code Execution
2013-09-25 00:00:00
nvd
nvd
CVE-2013-4660
2013-06-28 14:55:02
github
github
Deserialization Code Execution in js-yaml
2017-10-24 18:33:37
osv
osv
Deserialization Code Execution in js-yaml
2017-10-24 18:33:37
cve
cve
CVE-2013-4660
2022-10-03 16:14:58
checkpoint_advisories
checkpoint_advisories
Nodejs js-yaml load() Code Execution (CVE-2013-4660)
2013-12-22 00:00:00
zdt
zdt
Nodejs js-yaml load() Code Execution Vulnerability
2013-09-26 00:00:00
nodejs
nodejs
Deserialization Code Execution
2015-10-17 19:41:46
securityvulns
securityvulns
[oss-security] CVE request: various NodeJS module vulnerabilities
2014-05-15 00:00:00