Cross-Site Request Forgery (CSRF)

2019-07-1004:47:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

56.8%

JSON

react-dev-utils is vulnerable to cross-site request forgery. Local unauthenticated attackers could exploit the flawed Webserver component to execute arbitrary commands on the targeted system via the unsanitized input command to launch an editor.

CPENameOperatorVersion
react-dev-utilsle4.2.1
react-dev-utilsle5.0.1
react-dev-utilsle3.1.1
react-dev-utilsle1.0.3
react-dev-utilsle2.0.1

Name	Operator	Version
react-dev-utils	le	4.2.1
react-dev-utils	le	5.0.1
react-dev-utils	le	3.1.1
react-dev-utils	le	1.0.3
react-dev-utils	le	2.0.1

References

github.com/facebook/create-react-app/pull/4866

github.com/facebook/create-react-app/releases/tag/v1.1.5

0.002 Low

EPSS

Percentile

56.8%

JSON

Related for VERACODE:20755