Vulnerability Details CVE-2023-27849
rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.7%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/omnitaint/Vulnerability-Reports/blob/2211ea4712f24d20b7f223fb737910fdfb041edb/reports/rails-routes-to-json/report.md
- https://www.npmjs.com/package/rails-routes-to-json
- https://github.com/omnitaint/Vulnerability-Reports/blob/2211ea4712f24d20b7f223fb737910fdfb041edb/reports/rails-routes-to-json/report.md
- https://www.npmjs.com/package/rails-routes-to-json
Products affected by CVE-2023-27849
-
cpe:2.3:a:rails-routes-to-json_project:rails-routes-to-json:1.0.0