Publicly disclosed Proof-of-Concept (POC) exploit for the safer-eval@1.3.1 version
safer-eval-cve-CVE-2019-10760
safer-eval prior to 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
safer-eval project safer-eval |