Lucene search
+L

2 matches found

NVD
NVD
added 2020/07/29 1:15 p.m.21 views

CVE-2020-7697

This affects all versions of package mock2easy. a malicious user could inject commands through the data variable: Affected Area require'../server/getJsonByCurl'mock2easy, function error, stdout if error return res.json500, error; res.jsonJSON.parsestdout; , '', data.interfaceUrl, query,...

9.8CVSS9.6AI score0.02044EPSS
SaveExploits1References2
Prion
Prion
added 2020/07/29 1:15 p.m.16 views

Design/Logic Flaw

This affects all versions of package mock2easy. a malicious user could inject commands through the data variable: Affected Area require'../server/getJsonByCurl'mock2easy, function error, stdout if error return res.json500, error; res.jsonJSON.parsestdout; , '', data.interfaceUrl, query,...

7.5CVSS9.5AI score0.02044EPSS
SaveExploits1References2
Rows per page
Query Builder