Posted by Ron E on Aug 26 An unauthenticated remote debugger vulnerability exists in Escargot

v4.3.0-214-gfaee4437 when the application is compiled with ESCARGOT_DEBUGGER

support and the debug server is enabled using --start-debug-server. The

debugger accepts client connections without authentication or authorization

and provides access to privileged debugger functionality.

An attacker capable of reaching the debugger interface can establish a

debugger session and...