Description

The package vm2 before 3.9.10 are vulnerable to Arbitrary Code Execution due to the usage of prototype lookup for the WeakMap.prototype.set method. Exploiting this vulnerability leads to access to a host object and a sandbox compromise.

Remediation

References

https://github.com/patriksimek/vm2/pull/445/commits/3a9876482be487b78a90ac459675da7f83f46d69

https://github.com/patriksimek/vm2/pull/445

https://security.snyk.io/vuln/SNYK-JS-VM2-2990237

https://github.com/patriksimek/vm2/issues/444

Related Vulnerabilities

CVE-2019-14862 Vulnerability in maven package li.rudin.mavenjs:knockout

CVE-2016-7103 Vulnerability in maven package org.webjars.npm:jquery-ui

CVE-2018-11696 Vulnerability in npm package node-sass

CVE-2020-15152 Vulnerability in npm package ftp-srv

CVE-2020-27885 Vulnerability in maven package org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Exploit Issue Tracking NVD-CWE-noinfo