Vendors / Netmask Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Netmask Project records in CISA KEV No Netmask Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.15037 · Published 2021-04-01 · Partial fix · 1.1.0 CWE-704
Priority LOW 27
The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0151 · Published 2021-03-30 · Partial fix · 2.0.1 CWE-20
Open these records in search → All records by CVSS severity
1 0 1 0 0
