CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
6.3	$0-$5k	0.00

Gundumabayani

Gaskiya vulnerability da aka ware a matsayin kura an samu a IonicaBizau node-gry har 5.x. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka kura hakki ndiyam. Wannan matsala ana saninta da CVE-2020-36650. Babu exploit ɗin da ake samu. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Furɗebayani

Gaskiya vulnerability da aka ware a matsayin kura an samu a IonicaBizau node-gry har 5.x. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka kura hakki ndiyam. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-77. Hakika, rauni an bayyana shi 01/11/2023 kamar 22. An raba bayanin tsaro don saukewa a github.com.

Wannan matsala ana saninta da CVE-2020-36650. Tekinikal faɗi ba ga. Shaharar wannan vulnerability ɗin ƙasa da matsakaici ne. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro.

Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k.

Ana kiran patch ɗin da 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. Bugfix ɗin an shirya shi don saukewa a github.com. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Wannan shawara ta ƙunshi wannan magana:

fix command injection vulnerability

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Kayanbayani

Ngilabe

• IonicaBizau

Sunu

• node-gry

Furɗe

• 5.x

Laisens

• Borno-wuro

Webseite

• Kayan: https://github.com/IonicaBizau/node-gry/

CPE 2.3bayani

• 🔍
• 🔍

CPE 2.2bayani

• 🔍
• 🔍

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 6.3
VulDB Meta Temp Score: 6.3

VulDB Ganda Borno: 5.5
VulDB Temp Score: 5.3
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

NVD Ganda Borno: 8.0
NVD Furɗo: 🔍

CNA Ganda Borno: 5.5
CNA Furɗo (VulDB): 🔍

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

NVD Ganda Borno: 🔍

Gargajiyabayani

Klasu: Kura hakki ndiyam
CWE: CWE-77 / CWE-74 / CWE-707
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Kumgana

Gashina: 🔍
Halitta: A wondi feere

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍

0-Day	furu	furu	furu	furu
Lale	furu	furu	furu	furu

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Gargajiya
Halitta: 🔍

0-Day Gana: 🔍

Gargajiya: node-gry 6.0.0
Kari: 5108446c1e23960d65e8b973f1d9486f9f9dbd6c

Waktin layibayani

01/11/2023 🔍
01/11/2023 +0 Hənde 🔍
01/11/2023 +0 Hənde 🔍
02/04/2023 +24 Hənde 🔍

Ngizimbayani

Kayan: github.com

Gargaaji: 22
Halitta: Gaskiya

CVE: CVE-2020-36650 (🔍)
GCVE (CVE): GCVE-0-2020-36650
GCVE (VulDB): GCVE-100-218019

Gumtibayani

Súgá: 01/11/2023 18:57
Gargadi: 02/04/2023 07:19
Goyarwa: 01/11/2023 18:57 (43), 02/04/2023 07:13 (2), 02/04/2023 07:19 (28)
Gadankam: 🔍
Cache ID: 253:856:103

Ganaaji

Do you know our Splunk app?

Download it now for free!