Количество 2
Количество 2
CVE-2020-7697
This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON.parse(stdout)); }, '', _data.interfaceUrl, query, _data.cookie,_data.interfaceType);
GHSA-g4xj-wcq6-qwx5
Code injection in mock2easy
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-7697 This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON.parse(stdout)); }, '', _data.interfaceUrl, query, _data.cookie,_data.interfaceType); | CVSS3: 9.8 | 0% Низкий | больше 5 лет назад |
| GHSA-g4xj-wcq6-qwx5 Code injection in mock2easy | CVSS3: 9.8 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу