The package total.js before 3.4.7 is affected by CVE-2020-28494, allowing command execution via image function
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2020-28494 Command Injection | 2 Feb 202110:25 | – | cvelist |
![]() | Design/Logic Flaw | 2 Feb 202111:15 | – | prion |
![]() | CVE-2020-28494 | 2 Feb 202111:15 | – | cve |
![]() | OS Command Injection | 3 Feb 202105:11 | – | veracode |
![]() | GHSA-4449-HG37-77V8 Command injection in total.js | 5 Feb 202120:43 | – | osv |
![]() | CVE-2020-28494 | 2 Feb 202111:15 | – | osv |
![]() | Command injection in total.js | 5 Feb 202120:43 | – | github |
![]() | Command Injection | 23 Feb 202102:24 | – | nodejs |
![]() | Total.js < 3.4.7 Multiple Vulnerabilities | 8 Feb 202100:00 | – | openvas |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo