Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 5:2 p.m.18 views

Arbitrary Code Execution in require-node

Versions of require-node prior to 1.3.4 for 1.x and 2.0.4 for 2.x are vulnerable to Arbitrary Code Execution. The package fails to sanitize requests to the require-node endpoint, allowing attackers to execute arbitrary code in the server through the injection of OS commands in the request body...

6.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/03 5:2 p.m.12 views

GHSA-8J6J-4H2C-C65P Arbitrary Code Execution in require-node

Versions of require-node prior to 1.3.4 for 1.x and 2.0.4 for 2.x are vulnerable to Arbitrary Code Execution. The package fails to sanitize requests to the require-node endpoint, allowing attackers to execute arbitrary code in the server through the injection of OS commands in the request body...

8.6AI score
SaveExploits0References1
nodejs
nodejs
added 2019/06/20 8:20 p.m.21 views

Arbitrary Code Execution

Overview Versions of require-node prior to 1.3.4 for 1.x and 2.0.4 for 2.x are vulnerable to Arbitrary Code Execution. The package fails to sanitize requests to the require-node endpoint, allowing attackers to execute arbitrary code in the server through the injection of OS commands in the reques...

8.4AI score
SaveExploits0Affected Software1
Rows per page
Query Builder