CVE-2020-13110

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the…

published May 16, 2020

CVSS
—
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00737 · 54.0th percentile
Published
2020-05-16T11:56Z
EPSS history
Timeline
  • 16 MAY 11:56Z
    The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the…
    cvelistv5