Non évaluée
The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of...
CVE-2020-13110
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory linkedin.com
- advisory npmjs.com
- report op-c.net
- web medium.com