Lucene search
Veracode Vulnerability DatabaseVERACODE:13468HistoryMar 18, 2019 - 6:47 a.m.
Prototype Pollution
2019-03-1806:47:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
47.2%
safer-eval is vulnerable to prototype pollution. A lack of validation allows an attacker to inject arbitrary objects using Object.constructor to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| safer-eval | le | 1.3.1 |
References
Related
cve
cve
CVE-2019-10760
2019-10-15 15:15:11
github
github
Sandbox Breakout / Arbitrary Code Execution in safer-eval
2019-10-17 18:27:30
osv
osv
Sandbox Breakout / Arbitrary Code Execution in safer-eval
2019-10-17 18:27:30
CVE-2019-10760
2019-10-15 15:15:11
prion
prion
Code injection
2019-10-15 15:15:00
cvelist
cvelist
CVE-2019-10760
2019-10-15 14:53:11
nvd
nvd
CVE-2019-10760
2019-10-15 15:15:11