CVEDB API

In eslint-utils before 1.4.1, the getStaticValue function can execute arbitrary code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-15657

Eslint-Utils Project » Eslint-Utils » Version: 1.0.0

cpe:2.3:a:eslint-utils_project:eslint-utils:1.0.0
Eslint-Utils Project » Eslint-Utils » Version: 1.1.0

cpe:2.3:a:eslint-utils_project:eslint-utils:1.1.0
Eslint-Utils Project » Eslint-Utils » Version: 1.2.0

cpe:2.3:a:eslint-utils_project:eslint-utils:1.2.0
Eslint-Utils Project » Eslint-Utils » Version: 1.3.0

cpe:2.3:a:eslint-utils_project:eslint-utils:1.3.0
Eslint-Utils Project » Eslint-Utils » Version: 1.3.1

cpe:2.3:a:eslint-utils_project:eslint-utils:1.3.1
Eslint-Utils Project » Eslint-Utils » Version: 1.4.0

cpe:2.3:a:eslint-utils_project:eslint-utils:1.4.0