Skip to content
Threat Feed
Subscribe

Tag

Plaintext-Credentials

1 brief RSS
high advisory

Sandbox Escape in heym Expression Engine

The heym expression engine before version 0.0.91 is vulnerable to a sandbox escape via the DotList map/filter and fallback resolver, allowing authenticated users to achieve arbitrary Python code execution.

heym +1 sandbox-escape code-execution expression-engine web-vulnerability rce authentication-bypass plaintext-credentials
2t 1c