2 matches found
CVE-2016-10538
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...
4.9CVSS6.3AI score0.00992EPSS
SaveExploits1References4
Design/Logic Flaw
The package node-cli before 1.0.0 insecurely uses the lockfile and logfile. Both of these are temporary, but it allows the starting user to overwrite any file they have access to...
4.9CVSS6.6AI score0.00992EPSS
SaveExploits1References3Affected Software2
20