Описание
The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 0.1.5 (включая)
cpe:2.3:a:eslint-fixer_project:eslint-fixer:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 91%
0.0627
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-77
Связанные уязвимости
EPSS
Процентиль: 91%
0.0627
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-77