CVE-2019-5479CWE-98

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file)

published September 3, 2019

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01289 · 70.0th percentile
Weakness
CWE-98 · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
Published
2019-09-03T19:15Z
EPSS history
Timeline
  • 03 SEP 19:15Z
    An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file)
    cvelistv5