CVE-2020-13110

The Kerberos package for Node.js (prior to 1.0.0) is vulnerable to DLL Injection due to loading DLLs via kerberos_sspi LoadLibrary() without a full path, enabling arbitrary code execution and privilege escalation. Affected: Node.js Kerberos package before 1.0.0. Root cause: DLL path search select...