Lucene search
Veracode Vulnerability DatabaseVERACODE:40102HistoryApr 11, 2023 - 2:50 a.m.
Arbitrary Code Execution
2023-04-1102:50:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
vm2
vulnerability
setup-sandbox.js
error.preparestacktrace
async errors
sandbox protections
code execution
EPSS
0.017
Percentile
87.9%
vm2 is vulnerable to Arbitrary Code Execution. The vulnerability exists because the newWrapped function of setup-sandbox.js does not properly handle host objects passed to Error.prepareStackTrace in case of unhandled async errors, which allows an attacker to bypass the sandbox protections and execution arbitrary code on the system.
Related
cvelist
cvelist
CVE-2023-29017 vm2 Sandbox Escape vulnerability
2023-04-06 19:18:34
nessus
nessus
Node.js Module vm2 < 3.9.15 Sandbox Breakout
2023-04-07 00:00:00
osv
osv
vm2 vulnerable to sandbox escape
2023-04-07 20:35:03
CVE-2023-29017
2023-04-06 20:15:08
jsreport vulnerable to code injection
2023-05-08 18:30:17
openvas
openvas
vm2 < 3.9.15 Sandbox Escape Vulnerability
2023-05-02 00:00:00
ibm
ibm
githubexploit
githubexploit
redhatcve
redhatcve
CVE-2023-29017
2023-04-08 15:59:36
prion
prion
Remote code execution
2023-04-06 20:15:00
nvd
nvd
CVE-2023-29017
2023-04-06 20:15:08
f5
f5
K000134725 : vm2 vulnerability CVE-2023-29017
2023-05-22 00:00:00
github
github
vm2 vulnerable to sandbox escape
2023-04-07 20:35:03
jsreport vulnerable to code injection
2023-05-08 18:30:17
cve
cve
CVE-2023-29017
2023-04-06 20:15:08
thn
thn
huntr
huntr
An outdated dependency leads to to remote command execution vulnerability
2023-04-10 16:20:04
