Vulnerability Description
huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dawnsparks-Node-Tesseract Project | Dawnsparks-Node-Tesseract | 0.4.0 |
| Huedawn-Tesseract Project | Huedawn-Tesseract | 0.3.0 |
Related Weaknesses (CWE)
References
- https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24ExploitThird Party Advisory
- https://github.com/rona-dinihari/dawnsparks-node-tesseractProduct
- https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe5Patch
- https://www.npmjs.com/package/dawnsparks-node-tesseractProduct
- https://github.com/omnitaint/Vulnerability-Reports/blob/ec3645003c7f8996459b5b24ExploitThird Party Advisory
- https://github.com/rona-dinihari/dawnsparks-node-tesseractProduct
- https://github.com/rona-dinihari/dawnsparks-node-tesseract/commit/81d1664f0b9fe5Patch
- https://www.npmjs.com/package/dawnsparks-node-tesseractProduct
FAQ
What is CVE-2023-29566?
CVE-2023-29566 is a vulnerability with a CVSS score of 9.8 (CRITICAL). huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
How severe is CVE-2023-29566?
CVE-2023-29566 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-29566?
Check the references section above for vendor advisories and patch information. Affected products include: Dawnsparks-Node-Tesseract Project Dawnsparks-Node-Tesseract, Huedawn-Tesseract Project Huedawn-Tesseract.