CVE-2021-23389.md

CVE-2021-23389

Description

The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-TOTALJS-1088607

Github

No PoCs found on GitHub currently.