CVE-2019-10783 in lsof Module

요약

\~에 의해 MITRE

All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 예약하다: 2019. 04. 03.
• 모더레이션: 수락
• 항목: VDB-149516
• CPE: 준비됨
• CWE: CWE-74 (확인됨)
• CVSS: 9.8 (NVD)
• EPSS: 0.03665
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10783
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10783
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10783/