Vulnerability in Jsen Project
CVE-2020-7777
This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In particular the required field of the schema is not properly sanitized. The resulting string that is build based on the schema definition is then passed to a Function.apply();, leading to an Arbitrary Code Execution.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.021 (81.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 81st percentile — 81.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.021 · newest: 0.021 · change: 0.000
Affected products
- Jsen Project
- Jsen — versions 0
Public proof-of-concept exploits
References
- snyk.io/vuln/SNYK-JS-JSEN-1014670 (Exploit, Third Party Advisory)
- github.com/bugventure/jsen/blob/master/lib/jsen.js#L875 (Broken Link)
Frequently asked questions
- What is CVE-2020-7777?
- CVE-2020-7777 is a high-severity vulnerability in Jsen Project. CVSS score: 7.2/10. Published 2020-11-23.
- How severe is CVE-2020-7777?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2020-7777 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.