Em resumo
- CVE-2020-8149 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta logkitty (logkitty project), logkitty.
- Chance de exploração nos próximos 30 dias (EPSS): 2.0%, maior que 81.0% das vulnerabilidades.
- Correção: atualize para 0.7.1 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| logkitty | < 0.7.1
| 0.7.1
|
| logkitty npm | < 0.7.1
| 0.7.1
|
Description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
NVD description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free