Description

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.

Remediation

References

http://portal.nodesecurity.io/advisories/js-yaml

https://nealpoole.com/blog/2013/06/code-execution-via-yaml-in-js-yaml-nodejs-module/

Related Vulnerabilities

CVE-2023-50721 Vulnerability in maven package org.xwiki.platform:xwiki-platform-search-ui

CVE-2020-5427 Vulnerability in maven package org.springframework.cloud:spring-cloud-dataflow-server-core

CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http

CVE-2021-25646 Vulnerability in maven package org.apache.druid:druid-core

CVE-2020-25802 Vulnerability in maven package org.craftercms:crafter-studio

Severity

Critical

Classification

CWE-20

Tags

Vendor Advisory Exploit