npm/@frangoteam/fuxa CVE-2023-33831: critical 9.8, EPSS 25.95%
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.13 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r87q-fq37-pvr6
- https://nvd.nist.gov/vuln/detail/CVE-2023-33831
- https://github.com/frangoteam/FUXA
- https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831
- https://youtu.be/Xxa6yRB2Fpw
CVE-2023-33831 · published · modified · JSON