CVE-2025-32792 : Chi tiết

CVE-2025-32792

8.7
/
Cao
0.4%V4
2025-04-18
16h04 +00:00
A01-Broken Access Control
Network
2025-04-21
13h28 +00:00
Thông báo cho một CVE
Luôn được thông báo về mọi thay đổi đối với một CVE cụ thể.
Quản lý thông báo

Mô tả CVE

ses's global contour bindings leak into Compartment lexical scope

SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using `ses` and the Compartment API to evaluate third-party code in an isolated execution environment that have also elsewhere used `const`, `let`, and `class` bindings in the top-level scope of a `

Tài liệu tham khảo