PT-2019-14325
CVE-2019-15657
·
تاريخ النشر
2019-08-26
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
eslint-utils versions 1.2.0 through 1.4.0
Description
The issue concerns the execution of arbitrary code due to improper sanitization of user input by the
getStaticValue function. This allows attackers to supply malicious input that executes arbitrary code during the linting process. The getStringIfConstant and getPropertyName functions are not affected.Recommendations
Upgrade to version 1.4.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾