ghostoverflow/cve-2024-28397-command-execution-pocThis vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution.
This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution.
This repository contains a proof-of-concept (PoC) payload demonstrating a sandbox escape through js2py.disable_pyimport() a vulnerability in js2py versions up to 0.74.
When an application evaluates or parses user-supplied JSON/JavaScript unsafely, this vulnerability allows an attacker to break out of the JavaScript sandbox, reach into Python internals, locate subprocess.Popen, and execute arbitrary commands.
js2py to parse JavaScript securely.js2py.disable_pyimport(), and makes it possible to bypass intended import restrictions via global object access.__class__, __base__, and __subclasses__() to locate subprocess.Popen.disable_pyimport() sandbox escape https://github.com/advisories/GHSA-h95x-26f3-88hr