Accesslog Project

Accesslog

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2022-25760

Exploit
  • EPSS 0.46%
  • Published 17.03.2022 12:15:08
  • Last modified 21.11.2024 06:52:57

All versions of package accesslog are vulnerable to Arbitrary Code Injection due to the usage of the Function constructor without input sanitization. If (attacker-controlled) user input is given to the format option of the package's exported construc...