Description

The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.

Remediation

References

https://hackerone.com/reports/390929

Related Vulnerabilities

CVE-2022-22931 Vulnerability in maven package org.apache.james:james-server

CVE-2020-8127 Vulnerability in maven package org.webjars.npm:reveal.js

CVE-2020-19850 Vulnerability in npm package directus

CVE-2022-36896 Vulnerability in maven package com.compuware.jenkins:compuware-scm-downloader

CVE-2023-45138 Vulnerability in maven package org.xwiki.contrib.changerequest:application-changerequest-ui

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Mitigation Third Party Advisory CWE-94