Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36843
HistoryAug 30, 2022 - 4:54 a.m.

Remote Code Execution

2022-08-3004:54:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
remote code execution
morgan-json
user input
module.exports
remote attackers
malicious code
software

0.005 Low

EPSS

Percentile

75.9%

morgan-json is vulnerable to remote code execution. The vulnerability exists due to the missing sanitizations of user input passed to the module.exports function, which allows remote attackers to inject and execute malicious code.

CPENameOperatorVersion
morgan-jsonle1.1.0
morgan-jsonle1.1.0

0.005 Low

EPSS

Percentile

75.9%

Related for VERACODE:36843