CVE-2019-19771 in lodahs

Sumário

de MITRE

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservar: 12/12/2019
• Moderação: aceite
• Entrada: VDB-147152
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.01257
• KEV: não
• Atividades: muito baixo
• Sector: Finance, Hostingprovider, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-19771
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-19771
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-19771/