CVE-2020-16526 – **RESERVED**https://github.com/hacksparrow/safe-eval safe-eval 0.4.1 is affected by: Sandb …

Vuln ID: CVE-2020-16526

Published:  2021-01-12  22:15:12Z

Description: **RESERVED**https://github.com/hacksparrow/safe-eval safe-eval 0.4.1 is affected by: Sandbox Escape. The impact is: execute arbitrary code (remote). The component is: https://github.com/hacksparrow/safe-eval/blob/master/index.js. ¶¶ The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):