Description

The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.

Remediation

References

https://hackerone.com/reports/390929

Related Vulnerabilities

CVE-2022-36912 Vulnerability in maven package org.jenkins-ci.plugins:openstack-heat

CVE-2021-4278 Vulnerability in npm package tree-kit

CVE-2020-13935 Vulnerability in maven package org.apache.tomcat:tomcat-coyote

CVE-2021-24033 Vulnerability in maven package org.webjars.npm:react-dev-utils

CVE-2022-21122 Vulnerability in npm package metacalc

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Mitigation Third Party Advisory