CVE-2020-7777 - Arbitrary Code Execution

Back Back to CVE browser

HIGH

Arbitrary Code Execution

Published Nov 23, 2020

7.2

HIGH

CVSS 3.1

EPSS 2.11%

Description

This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In particular the required field of the schema is not properly sanitized. The resulting string that is build based on the schema definition is then passed to a Function.apply();, leading to an Arbitrary Code Execution.

Affected products

Vendor n/a Product Jsen Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <unspecified

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Jsen

n/a

Version	Status	Constraints
0	affected	<unspecified

Ecosystem	Package	Introduced	Fixed
npm	jsen	0	not fixed

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (6)

https://github.com/advisories/GHSA-vm64-cfqx-3698
Advisory
https://github.com/bugventure/jsen/blob/master/lib/jsen.js#L875
https://github.com/bugventure/jsen/blob/master/lib/jsen.js%23L875
x_refsource_MISCBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2020-7777
https://security.snyk.io/vuln/SNYK-JS-JSEN-1014670
https://snyk.io/vuln/SNYK-JS-JSEN-1014670
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-vm64-cfqx-3698		Advisory
https://github.com/bugventure/jsen/blob/master/lib/jsen.js#L875
https://github.com/bugventure/jsen/blob/master/lib/jsen.js%23L875		x_refsource_MISCBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2020-7777
https://security.snyk.io/vuln/SNYK-JS-JSEN-1014670
https://snyk.io/vuln/SNYK-JS-JSEN-1014670		x_refsource_MISCExploitThird Party Advisory