Lucene search

Improper Input Validation in access-policy

🗓️ 17 May 2021 21:29:00Reported by GitHub Advisory DatabaseType

Improper Input Validation in access-policy - Arbitrary Code Execution through 3.1.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Prion	Remote code execution	10 Jun 202016:15	–	prion
CNVD	Access-Policy Code Execution Vulnerability	11 Jun 202000:00	–	cnvd
Veracode	Remote Code Execution (RCE)	11 Jun 202006:32	–	veracode
Cvelist	CVE-2020-7674	10 Jun 202015:36	–	cvelist
OSV	CVE-2020-7674	10 Jun 202016:15	–	osv
OSV	Improper Input Validation in access-policy	17 May 202121:00	–	osv
CVE	CVE-2020-7674	10 Jun 202016:15	–	cve
NVD	CVE-2020-7674	10 Jun 202016:15	–	nvd

Vulners

Node

access-policy_project access-policyRange≤3.1.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-7674
snyk	www.snyk.io/vuln/SNYK-JS-ACCESSPOLICY-571490
github	www.github.com/advisories/GHSA-fw2f-7f87-5r6c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2021 21:00Current

9.2High risk

Vulners AI Score9.2

CVSS27.5

CVSS39.8

EPSS0.01201

CWE-94