CVE-2025-12735
CRITICALexpr-eval - Crafted Context Object Code Execution
Title source: manualExploitation Summary
EIP tracks 3 public exploits for CVE-2025-12735. PoCs published by alecasg555, AN5I, alnashawatirohwederb2167-max.
AI-analyzed exploit summary This repository provides a secure drop-in replacement for the vulnerable `expr-eval` library (CVE-2025-12735), which was susceptible to arbitrary code execution via JavaScript's `eval()` function. The `safe-expr-eval` library implements a secure expression evaluator using tokenization, parsing, and AST evaluation without dynamic code execution.
Description
The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.
Exploits (3)
This repository provides a secure drop-in replacement for the vulnerable `expr-eval` library (CVE-2025-12735), which was susceptible to arbitrary code execution via JavaScript's `eval()` function. The `safe-expr-eval` library implements a secure expression evaluator using tokenization, parsing, and AST evaluation without dynamic code execution.
This repository contains a Python-based exploit for CVE-2025-12735, targeting the `expr-eval` and `expr-eval-fork` npm packages. The exploit demonstrates RCE by manipulating the context object to inject arbitrary functions, with features for detection, endpoint discovery, and command execution.
This repository contains a Python-based exploit for CVE-2025-12735, targeting the `expr-eval` and `expr-eval-fork` npm packages. The exploit demonstrates RCE by injecting arbitrary functions into the context object used by the parser.
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H