CVE-2023-51661CWE-284

Filesystem sandbox not enforced in wasmer-cli

High · published December 22, 2023

CVSS v3.1
8.4
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem. This vulnerability has been patched in version 4.2.4.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00595 · 47.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-12-22T14:54Z
EPSS history
Timeline
  • 22 DEC 14:54Z
    Filesystem sandbox not enforced in wasmer-cli
    cvelistv5