Lucene search
GoogleOSV:DLA-3128-1HistoryOct 01, 2022 - 12:00 a.m.
node-thenify - security update
2022-10-0100:00:00
Google
osv.dev
21
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.8%
Bulletin has no description
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-thenify | eq | 3.3.0-1 |
Related
ubuntu
ubuntu
thenify vulnerability
2023-04-13 00:00:00
osv
osv
CVE-2020-7677
2022-07-25 14:15:10
node-thenify vulnerability
2023-04-13 17:23:24
thenify before 3.3.1 made use of unsafe calls to `eval`.
2022-07-18 19:15:29
nvd
nvd
CVE-2020-7677
2022-07-25 14:15:10
prion
prion
Session fixation
2022-07-25 14:15:00
cve
cve
CVE-2020-7677
2022-07-25 14:15:10
debiancve
debiancve
CVE-2020-7677
2022-07-25 14:15:10
ubuntucve
ubuntucve
CVE-2020-7677
2022-07-25 00:00:00
redhatcve
redhatcve
CVE-2020-7677
2022-09-16 05:13:17
nessus
nessus
Debian DLA-3128-1 : node-thenify - LTS security update
2022-09-30 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : thenify vulnerability (USN-6016-1)
2023-04-13 00:00:00
Fedora 36 : yarnpkg (2023-18fd476362)
2023-01-21 00:00:00
cvelist
cvelist
CVE-2020-7677 Arbitrary Code Execution
2022-07-25 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3128-1)
2022-10-01 00:00:00
Ubuntu: Security Advisory (USN-6016-1)
2023-04-14 00:00:00
Fedora: Security Advisory for yarnpkg (FEDORA-2023-ce8943223c)
2023-01-22 00:00:00
github
github
thenify before 3.3.1 made use of unsafe calls to `eval`.
2022-07-18 19:15:29
veracode
veracode
Arbitrary Code Injection
2020-06-19 03:00:24
debian
debian
[SECURITY] [DLA 3128-1] node-thenify security update
2022-09-30 22:55:44
fedora
fedora
[SECURITY] Fedora 36 Update: yarnpkg-1.22.19-3.fc36
2023-01-21 03:43:23
[SECURITY] Fedora 37 Update: yarnpkg-1.22.19-3.fc37
2023-01-21 03:34:16
[SECURITY] Fedora 38 Update: yarnpkg-1.22.19-5.fc38
2023-03-30 00:23:16
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.4 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.8%
Related for OSV:DLA-3128-1