HackerOne Vulnerabilities and Affected Products
Vulnerabilities associated with coffeescript node module.
Products
Clear product- hapi node module4 vulnerabilities
- RubyGems4 vulnerabilities
- sequelize node module4 vulnerabilities
- coffeescript node module3 vulnerabilities
- crud-file-server node module2 vulnerabilities
- express-cart2 vulnerabilities
- html-janitor node module2 vulnerabilities
- i18next node module2 vulnerabilities
- m-server2 vulnerabilities
- marked node module2 vulnerabilities
- Nextcloud Server2 vulnerabilities
- private_address_check ruby gem2 vulnerabilities
- remarkable node module2 vulnerabilities
- sanitize-html node module2 vulnerabilities
- serve node module2 vulnerabilities
- ws node module2 vulnerabilities
- 11xiaoli node module1 vulnerability
- 22lixian node module1 vulnerability
- 360class.jansenhm node module1 vulnerability
- 626 node module1 vulnerability
- active-support ruby gem1 vulnerability
- adamvr-geoip-lite node module1 vulnerability
- aedes1 vulnerability
- aegir node module1 vulnerability
- aerospike node module1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-16203HIGH | coffe-script is malwareThe coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | CVSS7.5v3.0 | EPSS1.12% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-16202HIGH | cofeescript is malwareThe cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | CVSS7.5v3.0 | EPSS1.18% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2017-16205HIGH | coffescript is malwareThe coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation. | CVSS7.5v3.0 | EPSS1.12% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |