Vulnerabilities found in bassmaster 1.5.2

[ghardytest]

CVE-2014-7205

Description: Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers to execute arbitrary Javascript code via unspecified vectors.
Discovery Date: 2019-07-16
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score: 10.0

Exploitability score: 10.0
Impact score: 10.0

Vendors

• bassmaster_project

References

• https://nodesecurity.io/advisories/bassmaster_js_injection
• bassmaster-cve20147205-code-exec(96730)
• 40689
• [oss-security] 20140924 Re: CVE request: various NodeJS module vulnerabilities
• outmoded/bassmaster@b751602
• 70180