Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2014/09/30/10 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/70180 | Third Party Advisory VDB Entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/96730 | Third Party Advisory VDB Entry |
https://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4 | Exploit |
https://nodesecurity.io/advisories/bassmaster_js_injection | Third Party Advisory |
https://www.exploit-db.com/exploits/40689/ | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-10-08T17:00:00
Updated: 2017-09-07T15:57:01
Reserved: 2014-09-27T00:00:00
Link: CVE-2014-7205
JSON object: View
NVD Information
Status : Analyzed
Published: 2014-10-08T17:55:05.217
Modified: 2019-07-16T12:20:55.777
Link: CVE-2014-7205
JSON object: View
Redhat Information
No data.
CWE