exploitDog

CVE-2019-15597

Опубликовано: 18 дек. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.

Ссылки

https://hackerone.com/reports/703412
Permissions Required
Third Party Advisory
https://hackerone.com/reports/703412
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:node-df_project:node-df:0.1.4:*:*:*:*:node.js:*:*

EPSS

Процентиль: 88%

0.03754

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

CWE-94

Связанные уязвимости

CVE-2019-15597

CVSS3: 8.8

redhat

около 6 лет назад

A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.

GHSA-wp7m-mrvf-599c

CVSS3: 9.8

github

почти 6 лет назад

Command Injection in node-df

EPSS

Процентиль: 88%

0.03754

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

CWE-94