Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102428
HistoryAug 27, 2019 - 12:00 a.m.

eslint-utils arbitrary code execution vulnerability

2019-08-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.004 Low

EPSS

Percentile

72.4%

eslint-utils is a utility for ESLint plugins and custom rules. eslint-utils versions prior to 1.4.1 are vulnerable to arbitrary code execution. An attacker can exploit this vulnerability to execute arbitrary code via the getStaticValue function.

CPENameOperatorVersion
mysticatea eslint-utilslt1.4.1

0.004 Low

EPSS

Percentile

72.4%