CVE-2013-4660
nodeca/js-yaml < 2.0.5 - Remote Code Execution via Unsafe YAML Tag Parsing
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-4660.
PoCs published by Metasploit, leehunkoo, Neal Poole, joev, including Metasploit module exploits/multi/fileformat/nodejs_js_yaml_load_code_exec.
AI-analyzed exploit summary This Metasploit module exploits a code execution vulnerability in the 'js-yaml' Node.js package (versions < 2.0.5) by crafting a malicious YAML file that executes arbitrary JavaScript when parsed via the `load()` function. The exploit leverages YAML's ability to deserialize JavaScript functions, allowing for remote code execution.
Description
The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation.
Exploits (3)
This Metasploit module exploits a code execution vulnerability in the 'js-yaml' Node.js package (versions < 2.0.5) by crafting a malicious YAML file that executes arbitrary JavaScript when parsed via the `load()` function. The exploit leverages YAML's ability to deserialize JavaScript functions, allowing for remote code execution.
This repository contains a functional PoC for CVE-2013-4660, demonstrating a deserialization attack via js-yaml's unsafe `load()` function. The exploit uses a crafted YAML file with a `!!js/function` tag to execute arbitrary JavaScript, leading to environment variable leakage.
This Metasploit module exploits a deserialization vulnerability in the 'js-yaml' Node.js package (versions < 2.0.5) by leveraging the unsafe !!js/function tag to execute arbitrary JavaScript code when parsing user-supplied YAML input.