Security Advisory

CVE-2017-1001002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-27 14:00:00

Last updated 2024-09-16 16:59:06

Assigner joshbressers

CVSS score not scored

State PUBLISHED

Description

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

← Browse all CVEs View on cve.org ↗