Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Coffescript Project Component: Coffescript Clear all filters
TI-2017-11924 CVE-2017-16205 · GHSA-mc9x-v9xg-25pm

Information disclosure in HackerOne coffeescript node module

Priority LOW 35

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2018-06-07 No fix listed CWE-506
TI-2017-11922 CVE-2017-16203 · GHSA-j49g-mp79-5vm5

Information disclosure in HackerOne coffeescript node module

Priority LOW 35

The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2018-06-07 No fix listed CWE-506