Lucene search
+L

1 matches found

nodejs
nodejs
added 2017/03/06 9:27 p.m.50 views

Unsafe eval()

Overview Affected versions of summit allow attackers to execute arbitrary commands via collection names when using the PouchDB driver. Recommendation No direct patch is available at this time. Currently, the best option to mitigate the issue is to avoid using the PouchDB driver, as the package...

7.5CVSS6.3AI score0.02497EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder