CVE-2017-16020

Published June 4th, 2018

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.

notduncansmith/summit

A Node.js Web Framework For Achievers

GitHub