CVE-2017-1001003 - AskarLabs CVE Database

CVE-2017-1001003

Vendor Math.js

Product math.js

Weakness CWE-88

Published November 27, 2017

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

Key dates

02Disclosure timeline

November 27, 2017 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-1001003 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/88.html