Lucene search
Bl4deNODEJS:667HistoryMay 16, 2018 - 8:00 p.m.
Command Injection
2018-05-1620:00:30
bl4de
www.npmjs.com
530
0.001 Low
EPSS
Percentile
38.3%
Overview
All versions of buttle are vulnerable to command injection. Remote command execution is possible when buttle is run with the --php-bin flag.
Recommendation
No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.
References
Related
osv
osv
Cross-Site Scripting in buttle
2019-04-08 15:18:38
veracode
veracode
Cross-site Scripting (XSS)
2018-07-05 05:21:19
prion
prion
Cross site scripting
2019-04-03 15:29:00
cve
cve
CVE-2019-5422
2019-04-03 15:29:01
github
github
Cross-Site Scripting in buttle
2019-04-08 15:18:38
nodejs
nodejs
Cross-Site Scripting
2019-06-19 20:03:20
nvd
nvd
CVE-2019-5422
2019-04-03 15:29:01
hackerone
hackerone
cvelist
cvelist
CVE-2019-5422
2019-04-03 14:21:40