Description
delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.
High · 7.2
CVE-2023-26919
EUVD-2023-30711GHSA-wfwf-xhx7-3whj
delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal fun…
Published Apr 10, 2023 · Updated Feb 11, 2025 · Assigned by mitre