Heroku-addonpool Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Heroku-addonpool Project records in CISA KEV

No Heroku-addonpool Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Heroku-addonpool · all components

TI-2020-06155 CVE-2020-7634 · GHSA-3q9x-w53p-jg53

MEDIUM 47

heroku-addonpool through 0.1.15 is vulnerable to Command Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02787 Published 2020-04-06 Fixed in 0.1.16 CWE-78