PT-2017-16784 · Npm · Serialize-To-Js

Ajinabraham · Publicado 2017-02-10 · Atualizado 2018-07-18 · CVE-2017-5954

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions serialize-to-js versions 0.5.0

Description An issue in the serialize-to-js package allows untrusted data passed into the deserialize() function to be exploited for arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE). This can be achieved by crafting a specific payload, such as a variable payload containing a malicious JavaScript Object. The exploitation involves using the deserialize() function from the serialize-to-js package, which can lead to code execution.

Recommendations Update to version 1.0.0 or later, and review the disclaimer from the author regarding the deserialize() function to understand its safe usage.

Exploit

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2017-5954

GHSA-MM62-WXC8-CF7M

Produtos afetados

Serialize-To-Js

Referências · 11

• 🔥 https://opsecx.com/index.php/2017/02/08/exploiting-node-js-deserialization-bug-for-remote-code-execution · Exploit
• https://github.com/commenthol/serialize-to-js/commit/1cd433960e5b9db4c0b537afb28366198a319429 · Nota
• https://github.com/commenthol/serialize-to-js/issues/1 · Correção
• https://github.com/commenthol/serialize-to-js · Nota
• https://npmjs.com/package/serialize-to-js#deserialize · Nota
• http://securityfocus.com/bid/96223 · Nota
• https://osv.dev/vulnerability/GHSA-mm62-wxc8-cf7m · Aviso do Fabricante
• https://github.com/advisories/GHSA-mm62-wxc8-cf7m · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5954 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5954 · Aviso do Fabricante
• https://npmjs.com/advisories/313 · Nota