Lucene search

K
osvGoogleOSV:GHSA-G4XJ-WCQ6-QWX5
HistoryMay 06, 2021 - 6:25 p.m.

Code injection in mock2easy

2021-05-0618:25:58
Google
osv.dev
5

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

This affects all versions up to and including version 0.0.24 of package mock2easy. a malicious user could inject commands through the _data variable:

Affected Area

require('../server/getJsonByCurl')(mock2easy, function(error, stdout) {
    if (error) {
        return res.json(500, error);
    }
    res.json(JSON.parse(stdout));
}, '', _data.interfaceUrl, query, _data.cookie, _data.interfaceType);```
CPENameOperatorVersion
mock2easyle0.0.24

9.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

Related for OSV:GHSA-G4XJ-WCQ6-QWX5