PT-2020-7577
CVE-2013-7378
·
تاريخ النشر
2020-02-12
·
تاريخ التحديث
2020-08-31
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Hubot Scripts versions prior to 2.4.4
Description
The issue allows remote attackers to execute arbitrary commands due to a command injection vulnerability in the
hubot-scripts/package/src/scripts/email.coffee module. The email script is not enabled by default and must be manually added to hubot's list of loaded scripts.Recommendations
Update hubot-scripts to version 2.4.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾