CVE-2020-13110
1 advisory.
npm/kerberos CVE-2020-13110: high 7.8, EPSS 0.74%
DLL Injection in kerberos
Action: Upgrade kerberos to 1.0.0 or later.
npm i kerberos@1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-m2mx-rfpw-jghv
- https://nvd.nist.gov/vuln/detail/CVE-2020-13110
- https://github.com/mongodb-js/kerberos
- https://medium.com/@kiddo_Ha3ker/dll-injection-attack-in-kerberos-npm-package-cb4b32031cd
- https://www.linkedin.com/posts/op-innovate_dll-injection-attack-in-kerberos-npm-package-activity-6667043749547253760-kVlW
- https://www.npmjs.com/advisories/1514
- https://www.op-c.net/2020/05/15/dll-injection-attack-in-kerberos-npm-package
CVE-2020-13110 · published · modified · JSON