CVE-2019-10789

2020-02-0615:58:53

snyk

www.cve.org

9.8 High

AI Score

Confidence

High

0.268 Low

EPSS

Percentile

96.8%

JSON

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.

CNA Affected

[
  {
    "product": "curling.js",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]