CVE-2020-24345

Publication date

2020-08-13 18:53:32

Family

mitre

State

PUBLISHED

Description

JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option