PT-2023-11623 · Unknown · Jerryscript

Juckchang · Publicado 2023-07-03 · Atualizado 2023-07-10 · CVE-2020-22597

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jerryscrip version 2.3.0

Description An issue in the Jerryscrip project allows a remote attacker to execute arbitrary code via the ecma builtin array prototype object slice parameter.

Recommendations For Jerryscrip version 2.3.0, consider restricting access to the ecma builtin array prototype object slice parameter to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2020-22597

Produtos afetados

Jerryscript

Referências · 7

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/3637 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-22597 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2020-22597 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2020-22597 · Nota de Segurança
• https://ubuntu.com/security/CVE-2020-22597 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2020-22597 · Aviso do Fabricante
• https://t.me/cibsecurity/65891 · Publicação no Telegram