Search vulnerabilities

Results 1

Export CSV
CVE-2020-28464

Remote Code Execution (RCE)

This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Products
Djv