Description
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that the problem is the lack of the --stack-limit option
Unscored
CVE-2020-24345
EUVD-2020-17079GHSA-83r4-4f6v-q83c
JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("[]",a). NOTE: the vendor states that th…
Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre