jsonpath-plus records
1 published records for vendor jsonpath-plus.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2024-21534Proof of concept | All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization.CWE-94 | Critical9.8 | — | 9.0% | Oct 11, 2024 |
- CVE-2024-2153442Plan
All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization.
CriticalCVSS 9.8Proof of conceptEPSS 9%Oct 11, 2024