CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects OpenSSL. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2023-49210
Severity
CRITICAL
CVSS
9.8
EPSS
1.91%
OpenSSL
Original NVD Description
The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field (used for command execution). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Related CVEs
Other vulnerabilities affecting the same vendor(s)