CVE-2018-12519

An issue was discovered in ShopNx through 2017-11-17

published June 19, 2018

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07765 · 94.6th percentile
Published
2018-06-19T21:00Z
EPSS history
Timeline
  • 19 JUN 21:00Z
    An issue was discovered in ShopNx through 2017-11-17
    cvelistv5