Description
mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to properties argument is executed by the eval function, resulting in code execution.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Code Injection in mosc and gives you actionable findings to investigate.
Start a free scanRelated Issues
- xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection - CVE-2020-28502
- Code Injection in node-rules - CVE-2020-7609
- Code Injection in cd-messenger - CVE-2020-7675
- xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection - xmlhttprequest - CVE-2020-28502
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023