| عنوان | AutohomeCorp frostmourne <=1.0 remote code execution |
|---|
| الوصف | A critical remote code execution vulnerability exists in Frostmourne's alarm expression evaluation system. Authenticated administrative users can inject arbitrary JavaScript code via the alarm configuration interface, which is then executed by the Nashorn script engine without validation, leading to complete server compromise.
|
|---|
| المصدر | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/17 |
|---|
| المستخدم | Ana10gy (UID 93358) |
|---|
| ارسال | 27/02/2026 08:13 AM (7 أشهر منذ) |
|---|
| الاعتدال | 11/03/2026 02:39 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 350397 [AutohomeCorp frostmourne حتى 1.0 Oracle Nashorn JavaScript Engine ExpressionRule.java scriptEngine.eval EXPRESSION تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|