← Back to browse
·
API
CVE-2021-23344
Severity
CRITICAL
CVSS
9.8
EPSS
0.04879
Risk score
40.91
CISA KEV
No
PoC
No
Published
2021-03-04
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2021-0594, GHSA-3WJ8-VP9H-RM6M
Products
n/a:total.js unspecified <3.4.8
Sources
euvd
EUVD-2021-0594
Description
The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0594
https://snyk.io/vuln/SNYK-JS-TOTALJS-1077069
https://github.com/totaljs/framework/commit/c812bbcab8981797d3a1b9993fc42dad3d246f04