CVE-2021-23390.md

CVE-2021-23390

Description

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-TOTAL4-1130527

Github

No PoCs found on GitHub currently.