← Back

Access Policy

access-policy

Vendor: Access Policy Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7674
1Access Policy Project
1Access Policy
Nov 21, 2024
Jun 10, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function is executed by the `eval` function resulting in code execution.