En resumen
- CVE-2023-29566 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a dawnsparks-node-tesseract (dawnsparks-node-tesseract project), huedawn-tesseract (huedawn-tesseract project), dawnsparks-node-tesseract.
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.3% de las vulnerabilidades.
- Solución: actualizar a 0.4.1 o posterior.
Description
dawnsparks-node-tesseract before 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
NVD description
huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free