Vulnerability · Published Apr 11, 2023 · Assigned by snyk
CVE-2023-26122
High 8.8
In plain English
A high-severity prototype pollution in safe-eval. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)2.1%top 18.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Exploiting this vulnerability might result in remote code execution ("RCE"). **Vulnerable functions:** __defineGetter__, stack(), toLocaleString(), propertyIsEnumerable.call(), valueOf().
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | safe-eval | no fix listed | GHSA-79xf-67r4-q2jj |
Affected products (as reported)
Weakness: CWE-265, CWE-1321 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P
References
- https://security.snyk.io/vuln/SNYK-JS-SAFEEVAL-3373064
- https://github.com/hacksparrow/safe-eval/issues/27
- https://gist.github.com/seongil-wi/2db6cb884e10137a93132b7f74879cce
- https://github.com/hacksparrow/safe-eval/issues/31
- https://github.com/hacksparrow/safe-eval/issues/32
- https://github.com/hacksparrow/safe-eval/issues/33
- https://github.com/hacksparrow/safe-eval/issues/34
- https://github.com/hacksparrow/safe-eval/issues/35