Posted by Ron E on Aug 26An unauthenticated remote debugger vulnerability exists in Escargot v4.3.0-214-gfaee4437 when the application is compiled with ESCARGOT_DEBUGGER support and the debug server is enabled using --start-debug-server. The debugger accepts client connections without authentication or authorization and provides access to privileged debugger functionality. An attacker capable of reaching the debugger interface can establish a debugger session and...