CVE-2022-23923

Sandbox Bypass

High · published May 1, 2022

CVSS v3.1
8.6
EPSS
1%
Percentile
70.9
In the wild
Unconfirmed
What it is

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.01333 · 70.9th percentile
Published
2022-05-01T15:25Z
EPSS history
Timeline
  • 01 MAY 15:25Z
    Sandbox Bypass
    cvelistv5