CVE-2019-10760 PoC — safer-eval 代码注入漏洞

Source

https://github.com/lirantal/safer-eval-cve-CVE-2019-10760

Associated Vulnerability

Title: safer-eval 代码注入漏洞 (CVE-2019-10760)
Description:safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code.

Description

Publicly disclosed Proof-of-Concept (POC) exploit for the safer-eval@1.3.1 version

Readme

# safer-eval-cve-CVE-2019-10760

The following proof-of-concept (POC) exploit addressing `safer-eval` version 1.3.1 and below is the first publicly known payload to attack this version range.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →