CVE-2019-10061

Опубликовано: 26 мар. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands.

Ссылки

https://github.com/peterbraden/node-opencv/commit/81a4b8620188e89f7e4fc985f3c89b58d4bcc86b
Patch
Third Party Advisory
https://github.com/peterbraden/node-opencv/commit/aaece6921d7368577511f06c94c99dd4e9653563
Patch
Third Party Advisory
https://www.npmjs.com/advisories/789
Third Party Advisory
https://github.com/peterbraden/node-opencv/commit/81a4b8620188e89f7e4fc985f3c89b58d4bcc86b
Patch
Third Party Advisory
https://github.com/peterbraden/node-opencv/commit/aaece6921d7368577511f06c94c99dd4e9653563
Patch
Third Party Advisory
https://www.npmjs.com/advisories/789
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:node-opencv_project:node-opencv:*:*:*:*:*:node.js:*:*

Версия до 6.1.0 (исключая)

EPSS

Процентиль: 93%

0.10469

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2019-10061

CVSS3: 9.8

ubuntu

почти 7 лет назад

CVE-2019-10061

CVSS3: 9.8

debian

почти 7 лет назад

utils/find-opencv.js in node-opencv (aka OpenCV bindings for Node.js) ...

GHSA-mc7w-4cjf-c973

CVSS3: 9.8

github

больше 4 лет назад

OS Command Injection in node-opencv

EPSS

Процентиль: 93%

0.10469

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78