CVE-2014-7192 PUBLISHED

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

EPSS 43.94% · 97.5th percentile

Risk Scores

EPSS Score
43.94%
97.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibv8-3.140, 3.14.5.8-5ubuntu2
Ubuntu:18.04:LTSlibv8-3.140, 3.14.5.8-11ubuntu1

Timeline

References

Open in Interactive Console →