writeups.xyz / How we exploited a remote code execution vulnerability in math.js

Submitter : c2a

Date: 16 January 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• Code Injection

Programs :

• Math.js

Authors :

• Giulio Muscarello (@CapacitorSet)
• Denys Vitali (@Denysvitali)

Link :
https://jwlss.pw/mathjs/