Beveiligingsadvies

CVE-2025-55346

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-14 09:49:52
Laatst bijgewerkt 2025-08-14 15:44:20
Toegewezen door JFROG
CVSS-score 9.8
Status PUBLISHED

Beschrijving

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request.