Cryo

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-3784 Aug 17, 13:29 npm CRITICAL POC Act Now

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Deserialization Code Injection Cryo

NVD

CVSS 3.1

9.8

EPSS

3.3%

CVE-2018-3784 npm

EPSS 3% CVSS 9.8

CRITICAL POC Act Now

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Deserialization Code Injection +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy