Kerberos Project Kerberos vulnerabilities

1 known vulnerability affecting kerberos_project/kerberos.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-13110HIGHCVSS 7.8fixed in 1.0.02020-05-16

CVE-2020-13110 [HIGH] CWE-427 CVE-2020-13110: The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalati The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.