Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command Injection
Vulnerability Description
This affects all versions of package buns. The injection point is located in line 678 in index file lib/index.js in the exported function install(requestedModule).
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Buns 命令注入漏洞
Vulnerability Description
Buns是Buns个人开发者的一款基于Javascript的用于执行Shell命令并可缓存输出的应用软件。 Buns all versions 存在命令注入漏洞，该漏洞源exported函数install(requestdmodule)的lib/index.js中的第678行。
CVSS Information
N/A
Vulnerability Type
N/A