CVE-2024-36120

CVSS V2 None CVSS V3 None

Description

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the expression simplification feature.

Overview

CVE ID
CVE-2024-36120

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-05-31T16:29:14.773Z

Last Modified Date
2024-06-04T17:47:46.023Z

Weakness Enumerations

CWE	URL
CWE-94	http://cwe.mitre.org/data/definitions/94.html

References

Reference URL	Reference Tags
https://github.com/ben-sb/javascript-deobfuscator/security/advisories/GHSA-9p6p-8v9r-8c9m	x_refsource_CONFIRM
https://github.com/ben-sb/javascript-deobfuscator/commit/630d3caec83d5f31c5f7a07e6fadf613d06699d6	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-36120
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36120

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 11:09:32				Added to TrackCVE