PT-2023-11623 · Unknown · Jerryscript

Juckchang · Published 2023-07-03 · Updated 2023-07-10 · CVE-2020-22597

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jerryscrip version 2.3.0

Description An issue in the Jerryscrip project allows a remote attacker to execute arbitrary code via the ecma builtin array prototype object slice parameter.

Recommendations For Jerryscrip version 2.3.0, consider restricting access to the ecma builtin array prototype object slice parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-22597

Affected Products

Jerryscript

References · 7

• 🔥 https://github.com/jerryscript-project/jerryscript/issues/3637 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-22597 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-22597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-22597 · Security Note
• https://ubuntu.com/security/CVE-2020-22597 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-22597 · Vendor Advisory
• https://t.me/cibsecurity/65891 · Telegram Post