Total.js

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Total.js records in CISA KEV

No Total.js vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Total4 · all components

TI-2021-06083 CVE-2021-23390 · GHSA-g7mq-rfj2-25wq

MEDIUM 47

The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02987 Published 2021-07-12 Fixed in 0.0.43 CWE-94