CVE-2024-21541

CVE-2024-21541 is a critical arbitrary code execution vulnerability affecting versions of the 'dom-iterator' package prior to 1.0.1. It arises from insufficient input sanitization when using the Function constructor, allowing attackers to inject and execute malicious code. With a CVSS score of 9.8, this vulnerability is easily exploitable over a network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or community discussions have been identified, the inherent risk is high due to the nature of arbitrary code execution.