CVEDB API

This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.7%

CVSS Severity

CVSS v3 Score 9.4

References

Products affected by CVE-2020-28437

Heroku-Env Project » Heroku-Env » Version: 0.0.0

cpe:2.3:a:heroku-env_project:heroku-env:0.0.0
Heroku-Env Project » Heroku-Env » Version: 0.0.1

cpe:2.3:a:heroku-env_project:heroku-env:0.0.1
Heroku-Env Project » Heroku-Env » Version: 0.1.0

cpe:2.3:a:heroku-env_project:heroku-env:0.1.0
Heroku-Env Project » Heroku-Env » Version: 0.1.1

cpe:2.3:a:heroku-env_project:heroku-env:0.1.1
Heroku-Env Project » Heroku-Env » Version: 0.2.0

cpe:2.3:a:heroku-env_project:heroku-env:0.2.0