exploitDog

CVE-2020-7786

Опубликовано: 08 фев. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.

Ссылки

https://snyk.io/vuln/SNYK-JS-MACFROMIP-1048336
Exploit
Third Party Advisory
https://www.npmjs.com/package/macfromip
Product
Third Party Advisory
https://snyk.io/vuln/SNYK-JS-MACFROMIP-1048336
Exploit
Third Party Advisory
https://www.npmjs.com/package/macfromip
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:macfromip_project:macfromip:*:*:*:*:*:node.js:*:*

EPSS

Процентиль: 66%

0.00513

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-vh8f-xw5v-8993

CVSS3: 9.8

github

почти 5 лет назад

Command Injection in macfromip

EPSS

Процентиль: 66%

0.00513

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-78