| शीर्षक | AutohomeCorp frostmourne <=1.0 remote code execution |
|---|
| विवरण | A critical remote code execution vulnerability exists in Frostmourne's alarm expression evaluation system. Authenticated administrative users can inject arbitrary JavaScript code via the alarm configuration interface, which is then executed by the Nashorn script engine without validation, leading to complete server compromise.
|
|---|
| स्रोत | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/17 |
|---|
| उपयोगकर्ता | Ana10gy (UID 93358) |
|---|
| सबमिशन | 27/02/2026 08:13 AM (5 महीनों पहले) |
|---|
| संयम | 11/03/2026 02:39 PM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 350397 [AutohomeCorp frostmourne तक 1.0 Oracle Nashorn JavaScript Engine ExpressionRule.java scriptEngine.eval EXPRESSION अधिकार वृद्धि] |
|---|
| अंक | 18 |
|---|