Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxr3-2hgv-qm8f

Опубликовано: 10 июл. 2024
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 8.3

Описание

node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.

Пакеты

Наименование

node-twain

npm
Затронутые версииВерсия исправления

<= 0.0.16

Отсутствует

EPSS

Процентиль: 28%
0.001
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-703

Связанные уязвимости

CVSS3: 8.3
nvd
больше 1 года назад

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.

EPSS

Процентиль: 28%
0.001
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-703