Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

L0Kihardtop

#24163de 53,639
9.8CVSS total
Vulnerabilidades · 1
PT-2023-11528
9.8
2023-04-04
Espruino · Espruino · CVE-2020-19693
**Name of the Vulnerable Software and Affected Versions** Espruino version 6ea4c0a **Description** An issue in Espruino allows an attacker to execute arbitrary code via the `oldFunc` parameter of the "jswrap object.c:jswrap function replacewith" endpoint. **Recommendations** For Espruino version 6ea4c0a, consider disabling the `jswrap function replacewith` function until a patch is available to prevent exploitation. Avoid using the `oldFunc` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.