PT-2019-20053 · Npm · Node-Os-Utils

Publicado 2019-06-11 · Atualizado 2019-06-11

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions node-os-utils versions prior to 1.1.0

Description The issue is related to insufficient input validation, which allows an attacker to run arbitrary commands on the server. This can lead to remote code execution.

Recommendations Upgrade to version 1.1.0 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

GHSA-J9F8-8H89-J69X

Produtos afetados

Node-Os-Utils

Referências · 4

• https://github.com/SunilWang/node-os-utils/issues/2 · Nota
• https://npmjs.com/advisories/784 · Nota
• https://osv.dev/vulnerability/GHSA-j9f8-8h89-j69x · Aviso do Fabricante
• https://snyk.io/vuln/SNYK-JS-NODEOSUTILS-173696 · Nota