CVE-2021-26276

scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command

published January 27, 2021

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01222 · 68.5th percentile
Published
2021-01-27T19:36Z
EPSS history
Timeline
  • 27 JAN 19:36Z
    scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command
    cvelistv5