VDB
BDU%3A2023-02869
BDU%3A2023-02869
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Уязвимость библиотеки vm2 пакетного менеджера NPM, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Node.js Foundation | Red Hat Advanced Cluster Management for Kubernetes, vm2 | |
| patriksimek | vm2 | < 3.9.18 |
Timeline
- May 15, 2023 CVE Published
- May 16, 2023 PoC Published
- May 16, 2023 PoC Published
- May 29, 2023 CVE Updated
- Jan 22, 2025 PoC Published
References
- https://gist.github.com/arkark/e9f5cf5782dec8321095be3e52acf5ac url
- https://github.com/patriksimek/vm2/commit/d88105f99752305c5b8a77b63ddee3ec86912daf url
- https://github.com/patriksimek/vm2/releases/tag/3.9.18 url
- https://github.com/advisories/GHSA-whpj-8f3w-67p5 url
- https://access.redhat.com/security/cve/CVE-2023-32314 url
- https://github.com/patriksimek/vm2/security/advisories/GHSA-whpj-8f3w-67p5 url