Lucene search
Jarda KotěšovecNODEJS:1HistoryOct 17, 2015 - 7:41 p.m.
Arbitrary JavaScript Execution
2015-10-1719:41:46
Jarda Kotěšovec
www.npmjs.com
20
EPSS
0.895
Percentile
98.8%
Overview
A vulnerability exists in bassmaster <= 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval.
Recommendation
Update to bassmaster version 1.5.2 or greater.
References
Related
cvelist
cvelist
CVE-2014-7205
2014-10-08 17:00:00
checkpoint_advisories
checkpoint_advisories
packetstorm
packetstorm
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution
2016-10-30 00:00:00
prion
prion
Design/Logic Flaw
2014-10-08 17:55:00
github
github
Arbitrary JavaScript Execution in bassmaster
2017-10-24 18:33:36
zdt
zdt
osv
osv
Arbitrary JavaScript Execution in bassmaster
2017-10-24 18:33:36
exploitdb
exploitdb
cve
cve
CVE-2014-7205
2014-10-08 17:55:05
metasploit
metasploit
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution
2016-10-27 18:22:39
nvd
nvd
CVE-2014-7205
2014-10-08 17:55:05