Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83r4-4f6v-q83c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

** DISPUTED ** JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option.

** DISPUTED ** JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option.

EPSS

Процентиль: 48%
0.00254
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option

CVSS3: 7.8
nvd
больше 5 лет назад

JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option

CVSS3: 7.8
debian
больше 5 лет назад

JerryScript through 2.3.0 allows stack consumption via function a(){ne ...

EPSS

Процентиль: 48%
0.00254
Низкий

7.8 High

CVSS3

Дефекты

CWE-787