CVE-2019-10807

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.

Affected

blamer

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.42% chance of exploitation in the next 30 days, 84th percentile

Published

2020-03-10

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://snyk.io/vuln/SNYK-JS-BLAMER-559541

Security advisories

• advisories/GHSA-8cxp-cjm8-fj36

References

• CVE Record
• NVD entry