CVE-2017-15879
1 advisory.
npm/keystone CVE-2017-15879: high 8.8
Keystone is vulnerable to CSV injection
Action: Upgrade keystone to 4.0.0-beta7 or later.
npm i keystone@4.0.0-beta7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0-beta7 | - |
Fixed versions
| 4.0.0-beta7 |
Sources
- osv: GHSA-6494-v9fq-fgq2
- https://nvd.nist.gov/vuln/detail/CVE-2017-15879
- https://github.com/keystonejs/keystone/pull/4478
- https://github.com/advisories/GHSA-6494-v9fq-fgq2
- https://packetstormsecurity.com/files/144755/KeystoneJS-4.0.0-beta.5-Unauthenticated-CSV-Injection.html
- https://www.exploit-db.com/exploits/43053
CVE-2017-15879 · published · modified · JSON