CyberRota Analysis
AI-GeneratedJSONata versions prior to 1.8.8 and 2.2.1 are vulnerable to a critical security flaw that allows attackers to execute arbitrary code by chaining multiple object-integrity weaknesses within crafted JSONata expressions. This vulnerability can lead to unauthorized access to prototype getters and the ability to execute code with the privileges of the host process, posing significant risks to applications using affected versions. Organizations utilizing JSONata should prioritize upgrading to the patched versions to mitigate this severe security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct JSONata functions or lambdas through $merge.*, replace proc.arguments.forEach used by applyProcedure, and forge internal lambda state. These primitives allowed an attacker to reach prototype getters, prototype and constructor access, and process.getBuiltinModule with child_process, executing code with the privileges of the host process. This issue is fixed in versions 1.8.8 and 2.2.1.