Описание
Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.
Ссылки
- Patch
- Patch
- Issue TrackingPatch
- Release Notes
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 13.1.0 (включая) до 15.2.0 (исключая)
cpe:2.3:a:mathjs:mathjs:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 44%
0.00577
Низкий
8.8 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-915
CWE-94
Связанные уязвимости
CVSS3: 8.8
redhat
3 месяца назад
Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has been patched in version 15.2.0.
CVSS3: 8.8
github
4 месяца назад
mathjs Allows Improperly Controlled Modification of Dynamically-Determined Object Attributes
EPSS
Процентиль: 44%
0.00577
Низкий
8.8 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-915
CWE-94