Vulnerabilities > CVE-2023-51661 - Unspecified vulnerability in Wasmer

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

wasmer

NVD

Published: 2023-12-22

Updated: 2024-11-21

Summary

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the browser. Wasm programs can access the filesystem outside of the sandbox. Service providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem. This vulnerability has been patched in version 4.2.4.

Vulnerable Configurations

Part	Description	Count
Application	Wasmer Wasmer Wasmer 3.0.0 Wasmer Wasmer 3.0.1 Wasmer Wasmer 3.0.2 Wasmer Wasmer 3.0.3 Wasmer Wasmer 3.1.0 Wasmer Wasmer 3.1.1 Wasmer Wasmer 3.2.0 Wasmer Wasmer 3.2.1 Wasmer Wasmer 3.3.0 Wasmer Wasmer 4.0.0 Wasmer Wasmer 4.1.0 Wasmer Wasmer 4.1.1 Wasmer Wasmer 4.1.2 Wasmer Wasmer 4.2.0 Wasmer Wasmer 4.2.1 Wasmer Wasmer 4.2.2 Wasmer Wasmer 4.2.3	31

Summary

Vulnerable Configurations

References