CVE-2021-23390
Code Injection in total4
Résumé
Code Injection in total4
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
total4
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.43"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com
- web snyk.io