9.8
Critical
CVE-2021-23390 The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions
Description
The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| total4 0.0 | earliest → < 0.0.43 | 0.0.43 |