CVE-2023-26919 | BDVDB-2026-199657 Detail
Description#
delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.