Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary Code Execution
Vulnerability Description
The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constructor.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
metacalc 代码注入漏洞
Vulnerability Description
metacalc是Metarhia社区的一个 Metarhia 的电子表格计算。 metacalc 0.0.2之前版本存在安全漏洞，该漏洞源于容易受到任意代码执行的攻击。攻击者利用该漏洞通过 Math 类访问 JavaScript 的 Function 构造函数。
CVSS Information
N/A
Vulnerability Type
N/A