CVE-2022-23923 HIGH

CVE-2022-23923: Sandbox Bypass

Vendor N/A
Product jailed
Published May 1, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P

What the vulnerability does

01Description

All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stored in the application.remote object.

Key dates

02Disclosure timeline

May 1, 2022 CVE published
September 17, 2024 Record updated