Описание
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.
Ссылки
- Exploit
- Vendor Advisory
- Exploit
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.10.32 (включая)
cpe:2.3:a:joyent:node.js:*:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.43935
Средний
10 Critical
CVSS2
Дефекты
CWE-94
Связанные уязвимости
ubuntu
больше 10 лет назад
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.
debian
больше 10 лет назад
Eval injection vulnerability in index.js in the syntax-error package b ...
EPSS
Процентиль: 97%
0.43935
Средний
10 Critical
CVSS2
Дефекты
CWE-94