CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. See the original NVD description below for full technical details.
CVE
CVE-2024-23347
Severity
HIGH
CVSS
7.8
EPSS
0.26%
Original NVD Description
Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application.
Related CVEs
Other vulnerabilities affecting the same vendor(s)