Логотип exploitDog
bind:CVE-2019-12047
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-12047

Количество 2

Количество 2

nvd логотип

CVE-2019-12047

больше 6 лет назад

Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-q4gr-p99g-9293

больше 3 лет назад

Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-12047

Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.

CVSS3: 6.1
0%
Низкий
больше 6 лет назад
github логотип
GHSA-q4gr-p99g-9293

Gridea v0.8.0 has an XSS vulnerability through which the Nodejs module can be called to achieve arbitrary code execution, as demonstrated by child_process.exec and the "<img src=# onerror='eval(new Buffer(" substring.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу