CVE-2022-24783: 
Rust vulnerability analysis and mitigation

Deno, a runtime for JavaScript and TypeScript, was found to contain a critical security vulnerability between versions 1.18.0 and 1.20.2. The vulnerability (CVE-2022-24783) allowed malicious actors controlling code executed in a Deno runtime to bypass all permission checks and execute arbitrary shell code. The vulnerability was discovered and disclosed on March 25, 2022, and was patched in version 1.20.3. This security issue did not affect users of Deno Deploy (GitHub Advisory).

The vulnerability stemmed from certain FFI (Foreign Function Interface) operations not correctly implementing permission checks, which could lead to unauthorized code execution. The issue was assigned a CVSS v3.1 base score of 10.0 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. The vulnerability was classified under CWE-863 (Incorrect Authorization) and CWE-269 (Improper Privilege Management) (NVD).

The vulnerability allowed attackers to bypass all permission checks in the Deno runtime, potentially leading to the execution of arbitrary shell code. This represented a significant security risk as it could enable unauthorized access and execution of malicious code on affected systems (GitHub Advisory).

The vulnerability was patched in Deno version 1.20.3. No workarounds were available, and all users were recommended to upgrade to version 1.20.3 immediately (GitHub Advisory).