eslint-utils Arbitrary Code Execution Vulnerability

eslint-utils is a utility for ESLint plugins and custom rules. An arbitrary code execution vulnerability exists in versions of eslint-utils prior to 1.4.1. An attacker can exploit this vulnerability to execute arbitrary code via the getStaticValue function...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

Code injection

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15657

CVE-2019-15657 affects eslint-utils prior to 1.4.1. The getStaticValue function can execute arbitrary code, enabling potential code execution when linting. The issue is present in versions before 1.4.1; upgrading to 1.4.1 or later is recommended as the remediation. The connected documents corrobo...

CVE-2019-15657

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Sql injection

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

GHSA-3GX7-XHV7-5MX3 Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

Arbitrary Code Execution in eslint-utils

Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions...

CVE-2019-15558

CVE-2019-15558 affects XM^online 2 Common Utils and Endpoints 0.2.1. The vulnerability is a SQL injection tied to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. CVSS metrics from NVD indicate a NETWORK-exposed, LOW-complexity attack with HIGH confidentiality, integrity, a...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

CVE-2019-15558

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

PT-2019-14325

Name of the Vulnerable Software and Affected Versions eslint-utils versions 1.2.0 through 1.4.0 Description The issue concerns the execution of arbitrary code due to improper sanitization of user input by the getStaticValue function. This allows attackers to supply malicious input that executes...

PT-2019-14274

Name of the Vulnerable Software and Affected Versions XM^online 2 Common Utils and Endpoints version 0.2.1 Description The issue allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java. Recommendations For version 0.2.1, at the moment, there is no...

CVE-2019-15657: Undefined Security Weakness

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code...

CVE-2019-15558: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java...

Arbitrary Code Execution

eslint-utils is vulnerable to arbitrary code execution. A lack of validation results in a prototype pollution vulnerability in the getStaticValue function which would allow an attacker to execute arbitrary code...

Arbitrary Code Execution

Overview Versions of eslint-utils =1.2.0 or 1.4.1 are vulnerable to Arbitrary Code Execution. The getStaticValue does not properly sanitize user input allowing attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName...