Lucene search
HistoryMay 28, 2023 - 11:15 p.m.
CVE-2023-31873
gin 0.7.4
arbitrary code
crafted file
child_process
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.4%
Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require(‘child_process’).
Affected configurations
Node
gin_projectginMatch0.7.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gin_project | gin | 0.7.4 | cpe:2.3:a:gin_project:gin:0.7.4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-31873
2023-05-28 00:00:00
packetstorm
packetstorm
Gin Markdown Editor 0.7.4 Arbitrary Code Execution
2023-05-24 00:00:00
cve
cve
CVE-2023-31873
2023-05-28 23:15:09
zdt
zdt
exploitdb
exploitdb
Gin Markdown Editor v0.7.4 (Electron) - Arbitrary Code Execution
2023-05-23 00:00:00
prion
prion
Security feature bypass
2023-05-28 23:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.4%
Related for NVD:CVE-2023-31873