Em resumo
- CVE-2020-7673 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta node-extend (node-extend project), node-extend.
- Chance de exploração nos próximos 30 dias (EPSS): 2.6%, maior que 85.3% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend function(A,B,as,isAargs) located within lib/extend.js is executed by the eval function, resulting in code execution.
NVD description
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `eval` function, resulting in code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free