Description

This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js

Remediation

References

https://security.snyk.io/vuln/SNYK-JS-DEFERREDEXEC-1050433

Related Vulnerabilities

CVE-2021-46366 Vulnerability in maven package info.magnolia:magnolia-core

CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.12

CVE-2021-23358 Vulnerability in maven package org.webjars.npm:underscore

CVE-2020-24922 Vulnerability in maven package com.xuxueli:xxl-job-admin

CVE-2022-46175 Vulnerability in npm package json5

Severity

Critical

Classification

CWE-77 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory