Lucene search
+L
Node-rules ProjectNode-rules

1 matches found

CVE
CVE
added 2020/04/27 9:6 p.m.80 views

CVE-2020-7609

CVE-2020-7609 affects the node-rules JavaScript engine. The vulnerability arises because the rules in function "fromJSON()" can be controlled by users without sanitization, enabling injection of arbitrary commands and potentially OS command execution. Affected range is described as 3.0.0 up to be...

9.8CVSS9.6AI score0.01596EPSS
Save