Lucene search
SnykCVELIST:CVE-2020-28440HistoryDec 11, 2020 - 4:55 p.m.
CVE-2020-28440 Command Injection
2020-12-1116:55:17
snyk
www.cve.org
2
cve-2020-28440
command injection
package corenlp-js-interface
main function
vulnerable
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
All versions of package corenlp-js-interface are vulnerable to Command Injection via the main function.
CNA Affected
[
{
"product": "corenlp-js-interface",
"vendor": "n/a",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2020-28440
2020-12-11 17:15:13
cve
cve
CVE-2020-28440
2020-12-11 17:15:13
veracode
veracode
Command Injection
2020-12-14 03:10:37
osv
osv
Command Injection in corenlp-js-interface
2020-12-18 18:23:04
prion
prion
Command injection
2020-12-11 17:15:00
github
github
Command Injection in corenlp-js-interface
2020-12-18 18:23:04
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
Related for CVELIST:CVE-2020-28440