Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-7205
HistoryOct 08, 2014 - 5:55 p.m.

CVE-2014-7205

2014-10-0817:55:05
CWE-94
[email protected]
web.nvd.nist.gov
1

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.895

Percentile

98.8%

JSON

Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.

Affected configurations

Nvd
Node
bassmaster_projectbassmasterRange<1.5.2
VendorProductVersionCPE
bassmaster_projectbassmaster*cpe:2.3:a:bassmaster_project:bassmaster:*:*:*:*:*:*:*:*

Related

cvelist 1
checkpoint_advisories 1
zdt 1
osv 1
exploitdb 1
cve 1
packetstorm 1
prion 1
github 1
nodejs 1
metasploit 1
cvelist
cvelist
CVE-2014-7205
2014-10-08 17:00:00
checkpoint_advisories
checkpoint_advisories
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution (CVE-2014-7205)
2017-02-23 00:00:00
zdt
zdt
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution Exploit
2016-10-29 00:00:00
osv
osv
Arbitrary JavaScript Execution in bassmaster
2017-10-24 18:33:36
exploitdb
exploitdb
Bassmaster 1.5.1 - Batch Arbitrary JavaScript Injection Remote Code Execution (Metasploit)
2016-11-02 00:00:00
cve
cve
CVE-2014-7205
2014-10-08 17:55:05
packetstorm
packetstorm
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution
2016-10-30 00:00:00
prion
prion
Design/Logic Flaw
2014-10-08 17:55:00
github
github
Arbitrary JavaScript Execution in bassmaster
2017-10-24 18:33:36
nodejs
nodejs
Arbitrary JavaScript Execution
2015-10-17 19:41:46
metasploit
metasploit
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution
2016-10-27 18:22:39

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.895

Percentile

98.8%

JSON
Related for NVD:CVE-2014-7205
cvelist1checkpoint_advisories1zdt1osv1exploitdb1cve1packetstorm1prion1github1nodejs1metasploit1