CVE-2020-28439

creationtimestamp| type| source ---|---|--- 2020-12-11 20:35:45+00:00| published-proof-of-concept| https://t.me/cibsecurity/20358 2020-12-11 20:46:02+00:00| published-proof-of-concept| https://t.me/cibsecurity/20378 2020-12-11 21:25:16+00:00| published-proof-of-concept|...

CVE-2020-28439

This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC:...

CVE-2020-28439

CVE-2020-28439 affects all versions of the npm package corenlp-js-prefab . The root cause is a dependency on the vulnerable corenlp-js-interface , with an injection point in the package’s index.js (line 10). Impact is command injection leading to potential arbitrary command execution when the mai...