SecurityHacker Noonabout 4 hours ago
Down Three Activepieces Vulnerabilities in Code Execution Pipelines
14 min read
Two high-severity Activepieces vulnerabilities execute before the V8 isolate exists, plus a reflected XSS injects attacker data into a script block. The V8 isolate contributed nothing to either flaw, undermining the sandbox's core promise of safe arbitrary code execution.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
