Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7022
HistoryJul 11, 2018 - 7:36 a.m.

Remote Code Execution (RCE)

2018-07-1107:36:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.95 High

EPSS

Percentile

99.3%

microsoft.chakracore is vulnerable to remote code execution (RCE) attacks. The library does not call the ImplicitCallFlags during code interpretation, leading to arbitrary code being injected and executed.