CVE-2024-23347
High
Description
Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute arbitrary code on the system as the application.
SeverityHigh
CVSS7.8
Exploit probability—
ProductFacebook Meta Spark Studio
PublishedJan 16, 2024
First seenJan 16, 2024
Weakness typeCWE-99CWE-99
How to fix
Update
- facebook meta_spark_studio176 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| facebook meta_spark_studio | v < 176 | 176 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.