high8.8
CVE-2021-38834
easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code.
Impact
easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy-Mock Project | Easy Mock | from 1.5.0 through 1.6.0 |