What’s Vulnerable › Vulnerabilities

CVE-2023-50044

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-20 · updated 2026-06-17
• Weakness: CWE-120

Description

Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

Affected products

• Cesanta mJS: 2.22.0

References

• https://github.com/cesanta/mjs/issues/254
• https://github.com/cesanta/mjs/pull/255
• https://github.com/cesanta/mjs/issues/254
• https://github.com/cesanta/mjs/pull/255

Get alerted when CVE-2023-50044 or the next vulnerability affects your stack