Vendor
ForbesLindesay
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.7
sync-rpc: Arbitrary remote code execution vulnerability
sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7, if an attacker could guess the correct port and it was not blocked via a firewall, it was possible to load and execute arbitrary JavaScript files s…