[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh0piqTW-zt1CXVINHJaWGZ6jxhgWjsLVlEnAiEFA-QQ":3,"g5a-risk:CVE-2019-1000014":102},{"success":4,"data":5,"meta":100},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":57,"weaknessesCount":49,"isActivelyExploited":61,"cisaInfo":15,"otxData":15,"relatedBlogPosts":62,"seoMetadata":63,"configurations":88,"relatedVendorCves":98,"notableEvents":99},"CVE-2019-1000014","What is CVE-2019-1000014?","Erlang\u002FOTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via Victim fetches packages from malicious\u002Fcompromised mirror. This vulnerability appears to have been fixed in 3.8.0.","Erlang\u002FOTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modificatio...","2019-02-04T21:29:01.207","2021-07-21T11:39:23.747",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",2.8,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.0179,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"erlang","rebar3","*","cpe:2.3:a:erlang:rebar3:*:*:*:*:*:*:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002Ferlang\u002Frebar3\u002Fpull\u002F1986","GitHub",[55,56],"Issue Tracking","Third Party Advisory",[58],{"id":59,"name":59,"description":60},"Unknown","NVD-CWE-noinfo",false,[],{"title":64,"metaDescription":65,"keywords":66,"canonicalUrl":67,"structuredData":68},"What is CVE-2019-1000014? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1000014, a high severity cyber security vulnerability from 2019. Erlang\u002FOTP Rebar3 version 3.7.0 through 3.7.5 contains a ...","CVE-2019-1000014, CVE-2019-1000014 vulnerability, CVE-2019-1000014 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, erlang security, rebar3 vulnerability","\u002Fwhat-is\u002Fcve-2019-1000014",{"@context":69,"@type":70,"headline":64,"description":65,"datePublished":10,"dateModified":11,"author":71,"publisher":75,"about":79,"mainEntityOfPage":83,"articleSection":86,"keywords":87},"https:\u002F\u002Fschema.org","TechArticle",{"@type":72,"name":73,"url":74},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":72,"name":73,"url":74,"logo":76},{"@type":77,"url":78},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":80,"name":6,"description":81,"additionalType":82},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":84,"@id":85},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1000014","Cybersecurity","CVE-2019-1000014, CVE-2019-1000014 vulnerability, CVE-2019-1000014 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[89],{"Operator":15,"Negate":15,"Nodes":90},[91],{"Operator":92,"Negate":15,"CPEMatch":93},"OR",[94],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":95,"VersionStartExcluding":15,"VersionStartIncluding":96,"VersionEndExcluding":15,"VersionEndIncluding":97},"3036E9AE-80C3-4AA6-8A57-7AEF794EC3A6","3.7.0","3.7.5",[],[],{"lastModified":11,"cacheTime":101,"version":33},1792249097698,{"score":103,"band":104,"action":105,"scoredAt":106},48,"Medium","Plan remediation","2026-10-16T06:45:32.246972+00:00"]