Описание
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | DNE | |
| esm-apps/bionic | not-affected | disputed |
| esm-apps/jammy | not-affected | disputed |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | not-affected | disputed |
| kinetic | DNE | |
| lunar | DNE | |
| mantic | DNE |
Показывать по
Ссылки на источники
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
JerryScript through 2.3.0 allows stack consumption via function a(){ne ...
** DISPUTED ** JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option.
6.8 Medium
CVSS2
7.8 High
CVSS3