CVE-2019-10789

2020-02-0615:58:53

snyk

www.cve.org

AI Score

9.8

Confidence

High

EPSS

0.268

Percentile

96.8%

JSON

All versions of curling.js are vulnerable to Command Injection via the run function. The command argument can be controlled by users without any sanitization.

CNA Affected

[
  {
    "product": "curling.js",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  }
]