icon

We found results for “

WS-2019-0018

Good to know:

icon
icon

Date: February 21, 2019

All versions of node-os-utils are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.

Language: JS

Severity Score

Severity Score

Weakness Type (CWE)

Code

CWE-17

Input Validation

CWE-20

Top Fix

icon

Upgrade Version

Upgrade to version 1.1.0

Learn More

CVSS v3

Base Score:
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL

Do you need more information?

Contact Us