PT-2014-7837

CVE-2014-7205

Publicado

2014-10-08

Atualizado

2019-07-16

Descrição por

CVSS 2.0

Alta

MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions bassmaster versions prior to 1.5.2

Description The issue allows remote attackers to execute arbitrary Javascript code via unspecified vectors, due to an eval injection vulnerability in the internals.batch function in lib/batch.js. This vulnerability exists in versions of bassmaster that allow an attacker to provide arbitrary JavaScript that is then executed server-side via eval.

Recommendations For versions prior to 1.5.2, update to bassmaster version 1.5.2 or greater.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Identificadores relacionados

CVE-2014-7205