CVE-2019-5483 - Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users

MEDIUM

Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users

Published Sep 9, 2019

5.3

MEDIUM

CVSS 3.1

EPSS 1.18%

Seneca < 3.9.0 contains a vulnerability that could lead to exposing environment variables to unauthorized users.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Seneca

n/a

Version	Status	Constraints
Fixed versions >= 3.9.0	affected	-

Ecosystem	Package	Introduced	Fixed
npm	seneca	0	3.9.0

No remediation recorded yet.

Weaknesses (1)

CWE-209

Link	Providers	Tags
https://github.com/advisories/GHSA-2xwv-3cc9-fp7c		Advisory
https://github.com/nodejs/security-wg/blob/master/vuln/npm/501.json
https://hackerone.com/reports/526258		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-5483
https://www.npmjs.com/advisories/1155