9.3
CVE-2019-19771
- EPSS 1.26%
- Veröffentlicht 12.12.2019 20:15:17
- Zuletzt bearbeitet 21.11.2024 04:35:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lodahs Project ≫ Lodahs Version1.0.0 SwPlatformnode.js
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.26% | 0.657 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
https://www.npmjs.com/advisories/1417
https://www.npmjs.com/package/lodahs