In breve
- CVE-2020-8149 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda logkitty (logkitty project), logkitty.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.0%, superiore al 81.0% delle vulnerabilità.
- Correzione: aggiornare a 0.7.1 o successiva.
| Package | Affected versions | Patched versions |
|---|
| logkitty | < 0.7.1
| 0.7.1
|
| logkitty npm | < 0.7.1
| 0.7.1
|
Description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
NVD description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free