Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Coffescript Project records in CISA KEVNo Coffescript Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 35
The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01158 · Published 2018-06-07 · No fix listed CWE-200
Priority LOW 35
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01106 · Published 2018-06-07 · No fix listed CWE-506
Priority LOW 35
The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01106 · Published 2018-06-07 · No fix listed CWE-506
Open these records in search →