Lucene search

K
osvGoogleOSV:GHSA-MRXV-PR4H-963Q
HistoryAug 03, 2022 - 12:00 a.m.

image-tiler susceptible to command injection

2022-08-0300:00:57
Google
osv.dev
8
image-tiler package
command injection
vulnerability
software

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.1%

A command injection vulnerability affects the package image-tiler before version 2.0.2.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.1%

Related for OSV:GHSA-MRXV-PR4H-963Q