Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-7747
This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.004
EPSS Ranking
62.3%
CVSS Severity
CVSS v3 Score
6.3
CVSS v2 Score
3.5
References
https://github.com/lightning-viz/lightning/blob/master/app/controllers/session.js%23L230
https://snyk.io/vuln/SNYK-JS-LIGHTNINGSERVER-1019381
https://github.com/lightning-viz/lightning/blob/master/app/controllers/session.js
https://github.com/lightning-viz/lightning/blob/master/app/controllers/session.js%23L230
https://snyk.io/vuln/SNYK-JS-LIGHTNINGSERVER-1019381
Products affected by CVE-2020-7747
Lightning-Viz
»
Lightning
»
Version:
N/A
cpe:2.3:a:lightning-viz:lightning:-
Lightning-Viz
»
Lightning
»
Version:
0.1.1
cpe:2.3:a:lightning-viz:lightning:0.1.1
Lightning-Viz
»
Lightning
»
Version:
0.1.10
cpe:2.3:a:lightning-viz:lightning:0.1.10
Lightning-Viz
»
Lightning
»
Version:
0.1.11
cpe:2.3:a:lightning-viz:lightning:0.1.11
Lightning-Viz
»
Lightning
»
Version:
0.1.12
cpe:2.3:a:lightning-viz:lightning:0.1.12
Lightning-Viz
»
Lightning
»
Version:
0.1.13
cpe:2.3:a:lightning-viz:lightning:0.1.13
Lightning-Viz
»
Lightning
»
Version:
0.1.14
cpe:2.3:a:lightning-viz:lightning:0.1.14
Lightning-Viz
»
Lightning
»
Version:
0.1.2
cpe:2.3:a:lightning-viz:lightning:0.1.2
Lightning-Viz
»
Lightning
»
Version:
0.1.3
cpe:2.3:a:lightning-viz:lightning:0.1.3
Lightning-Viz
»
Lightning
»
Version:
0.1.4
cpe:2.3:a:lightning-viz:lightning:0.1.4
Lightning-Viz
»
Lightning
»
Version:
0.1.5
cpe:2.3:a:lightning-viz:lightning:0.1.5
Lightning-Viz
»
Lightning
»
Version:
0.1.6
cpe:2.3:a:lightning-viz:lightning:0.1.6
Lightning-Viz
»
Lightning
»
Version:
0.1.7
cpe:2.3:a:lightning-viz:lightning:0.1.7
Lightning-Viz
»
Lightning
»
Version:
0.1.8
cpe:2.3:a:lightning-viz:lightning:0.1.8
Lightning-Viz
»
Lightning
»
Version:
0.1.9
cpe:2.3:a:lightning-viz:lightning:0.1.9
Lightning-Viz
»
Lightning
»
Version:
0.2.0
cpe:2.3:a:lightning-viz:lightning:0.2.0
Lightning-Viz
»
Lightning
»
Version:
0.2.1
cpe:2.3:a:lightning-viz:lightning:0.2.1
Lightning-Viz
»
Lightning
»
Version:
0.2.2
cpe:2.3:a:lightning-viz:lightning:0.2.2
Lightning-Viz
»
Lightning
»
Version:
1.0.0
cpe:2.3:a:lightning-viz:lightning:1.0.0
Lightning-Viz
»
Lightning
»
Version:
1.0.1
cpe:2.3:a:lightning-viz:lightning:1.0.1
Lightning-Viz
»
Lightning
»
Version:
1.1.0
cpe:2.3:a:lightning-viz:lightning:1.1.0
Lightning-Viz
»
Lightning
»
Version:
1.1.1
cpe:2.3:a:lightning-viz:lightning:1.1.1
Lightning-Viz
»
Lightning
»
Version:
1.2.0
cpe:2.3:a:lightning-viz:lightning:1.2.0
Lightning-Viz
»
Lightning
»
Version:
1.2.1
cpe:2.3:a:lightning-viz:lightning:1.2.1
Lightning-Viz
»
Lightning
»
Version:
1.2.2
cpe:2.3:a:lightning-viz:lightning:1.2.2
Lightning-Viz
»
Lightning
»
Version:
1.2.3
cpe:2.3:a:lightning-viz:lightning:1.2.3
Lightning-Viz
»
Lightning
»
Version:
1.2.4
cpe:2.3:a:lightning-viz:lightning:1.2.4
Lightning-Viz
»
Lightning
»
Version:
1.2.5
cpe:2.3:a:lightning-viz:lightning:1.2.5
Lightning-Viz
»
Lightning
»
Version:
1.3.0
cpe:2.3:a:lightning-viz:lightning:1.3.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved