4 matches found
CVE-2020-28424
creationtimestamp| type| source ---|---|--- 2022-08-02 18:18:00+00:00| seen| https://t.me/cibsecurity/47415...
9.8CVSS8.7AI score0.00776EPSS
SaveExploits1References1
CVE-2020-28424
This affects all versions of package s3-kilatstorage...
9.8CVSS0.00776EPSS
SaveExploits1References1
CVE-2020-28424
CVE-2020-28424 affects all versions of the npm package s3-kilatstorage. The root cause is lack of input sanitization in the code that invokes a shell command (using s3cmd), enabling potential arbitrary command execution. PoC demonstrates injecting commands via an argument to makeBucket(); no fixe...
9.8CVSS8.4AI score0.00776EPSS
SaveExploits1References1Affected Software1
20