icon

We found results for “

WS-2019-0194

Good to know:

icon

Date: August 28, 2019

awesome_bot 1.18.0 contains a backdoor mechanism that allows launching of hidden cryptocurrency mining operations inside the project. The code also contains a backdoor mechanism that allows the attacker to send a cookie file back to project and allow the attacker to execute malicious commands.

Language: Ruby

Severity Score

Severity Score

Weakness Type (CWE)

Code

CWE-17

Top Fix

icon

Upgrade Version

Upgrade to version 1.19.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): NONE

Do you need more information?

Contact Us