CVE-2019-5413
CRITICALmorgan < 1.9.1 - Remote Code Execution via Format Parameter Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-5413. PoCs published by crstaicu, forse01.
AI-analyzed exploit summary The repository claims to be a PoC for CVE-2019-5413 but contains no actual exploit code, only a README stating 'Fake repo'. This is a clear deception.
Description
An attacker can use the format parameter to inject arbitrary commands in the npm package morgan < 1.9.1.
Exploits (3)
The repository claims to be a PoC for CVE-2019-5413 but contains no actual exploit code, only a README stating 'Fake repo'. This is a clear deception.
The repository appears to be a stub or placeholder for CVE-2019-5413, containing only a README with minimal content and a 'log' directory with Node.js module dependencies. No actual exploit code or proof-of-concept is present.
The repository appears to be a stub or placeholder for CVE-2019-5413, containing only a README with minimal content and a 'log' directory with Node.js module dependencies unrelated to the vulnerability. No exploit code or technical details are present.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H