Lucene search
+L

1 matches found

OSV
OSV
added 2020/09/01 4:39 p.m.30 views

GHSA-CWCP-6C48-FM7M Unsafe eval() in summit allows arbitrary code execution

Affected versions of summit allow attackers to execute arbitrary commands via collection names when using the PouchDB driver. Recommendation No direct patch is available at this time. Currently, the best option to mitigate the issue is to avoid using the PouchDB driver, as the package author has...

9.8CVSS7.4AI score0.02497EPSS
SaveExploits0References3
Rows per page
Query Builder