Top New Trends Comments Past Ask Show Jobs

JSONPath Plus Remote Code Execution (RCE) Vulnerability(github.com)

2 points·by niel·2 anni fa·1 comments

JSONPath Plus Remote Code Execution (RCE) Vulnerability

https://github.com/JSONPath-Plus/JSONPath/issues/226

3 comments

[deleted]·2 anni fa

niel·2 anni fa

JSONPath-Plus is a widely used [0] JavaScript package to query JSON objects with the JSONPath query language.

Recent versions allow trivial RCE. [1]

[0] 800+ direct dependants https://www.npmjs.com/package/jsonpath-plus?activeTab=depend... [1] https://github.com/JSONPath-Plus/JSONPath/issues/226

[deleted]·2 anni fa

JSONPath Plus Remote Code Execution (RCE) Vulnerability · HackerTrans