7.8
CVE-2017-1000451
- EPSS 0.77%
- Veröffentlicht 02.01.2018 17:29:00
- Zuletzt bearbeitet 21.11.2024 03:04:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginfs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fs-git Project ≫ Fs-git Version <= 1.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.77% | 0.509 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
https://nodesecurity.io/advisories/360