Node.js docu-scilla code execution |
NAME
Node.js docu-scilla code execution
- Platforms Affected:
Node.js docu-scilla - Risk Level:
9.8 - Exploitability:
Unproven - Consequences:
Gain Access
DESCRIPTION
Node.js docu-scilla could allow a remote attacker to execute arbitrary code on the system, caused by the containment of malicious package. An attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS 3.0 Information
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Access Vector: Network
- Access Complexity: Low
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High
- Remediation Level: Unavailable
MITIGATION
No remedy available as of June 27, 2022.
- Reference Link:
https://security.snyk.io/vuln/SNYK-JS-DOCUSCILLA-2934698 - Reference Link:
https://www.npmjs.com/package/docu-scilla
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.
