CVE-2020-8141 - AskarLabs CVE Database

CVE-2020-8141

Vendor N/A

Product dot

Weakness CWE-94 · Code injection

Published March 15, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.

Key dates

02Disclosure timeline

March 15, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8141 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2023-24835 Softnext SPAM SQR - Code Injection CVE-2024-10131 Remote Code Execution in infiniflow/ragflow CVE-2024-36268 Apache InLong TubeMQ Client: Remote Code Execution vulnerability CVE-2026-35178 Workbench Affected by Remote Code Execution (RCE) via Malicious Cookie in Timezone Conversion CVE-2023-1005 JP1016 Markdown-Electron code injection