CRITICAL🇵🇱 Wersja polska

CVE-2023-43338

CVSS 9.8v3.1pub. 2023-09-23upd. 2024-11-21

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cesanta Mjs

    APP
    Cesanta
    2.20.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-50044CRITICAL9.8PL ✓ten sam produkt

Cesanta MJS: out-of-bounds read w funkcji getprop_builtin_foreign

CVE-2024-35386HIGH7.5ten sam produkt

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc functio...

CVE-2023-49552HIGH7.5ten sam produkt

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs...

CVE-2023-49550HIGH7.5ten sam produkt

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 comp...

CVE-2023-49549HIGH7.5ten sam produkt

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos ...