CVE-2017-1001002 - AskarLabs CVE Database

CVE-2017-1001002

Vendor Math.js

Product math.js

Weakness CWE-94 · Code injection

Published November 27, 2017

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

Key dates

02Disclosure timeline

November 27, 2017 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-1001002 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2025-23312 CVE-2026-4004 Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter CVE-2026-22807 vLLM affected by RCE via auto_map dynamic module loading during model initialization CVE-2025-49521 Event-driven-ansible: template injection via git branch and refspec in eda projects CVE-2026-4681 Critical Remote Code Execution vulnerability reported in Windchill