CVE-2024-23347
Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would hav…
Published: 2024-01-16 · CVSS: 7.8 · CVSS 3.1
Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7