Security researchers have discovered six vulnerabilities in protobuf.js, a widely-used JavaScript/TypeScript implementation of Protocol Buffers. These flaws could enable attackers to execute remote code execution (RCE) and denial-of-service (DoS) attacks against Node.js applications. A single malicious protobuf schema, descriptor, or payload could be sufficient to exploit these vulnerabilities in
Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers (Protobuf), that, if successfully exploited, could result in remote code execution (RCE) and denial-of-service (DoS) attacks. "In affected environments, a single malicious protobuf schema, descriptor, or crafted payload could be enough to trigger
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
