Lucene search
+L

1 matches found

OSV
OSV
added 2018/07/26 4:22 p.m.25 views

GHSA-CGQV-X5CX-XVQH Arbitrary Code Injection in pouchdb

Affected versions of pouchdb do not properly sandbox the code execution engine which executes the map/reduce functions for temporary views and design documents. Under certain circumstances, an attacker could uses this to run arbitrary code on the server. Recommendation Update to version 6.0.5 or...

10CVSS9.9AI score0.02605EPSS
SaveExploits0References3
Rows per page
Query Builder