CVE-2020-7730 in bestzip

Riassunto

di MITRE

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Snyk
• Prenotare: 21/01/2020
• Moderazione: accettato
• Voce: VDB-160756
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.03145
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7730
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7730
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7730/