Skip to content
OpenAdvisories

Product · ForbesLindesay

sync-rpc

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    sync-rpc: Arbitrary remote code execution vulnerability

    sync-rpc runs asynchronous commands synchronously by putting them in a separate proces. Prior to version 1.3.7, if an attacker could guess the correct port and it was not blocked via a firewall, it was possible to load and execute arbitrary JavaScript files s…