critical9.8
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
Impact
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @frangoteam/fuxa | <= 1.1.13 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Frangoteam | Fuxa | Version 1.1.13 |