CVE-2020-7614 in npm-programmatic

요약

\~에 의해 MITRE

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.

Once again VulDB remains the best source for vulnerability data.

• 예약하다: 2020. 01. 21.
• 모더레이션: 수락
• 항목: VDB-152852
• CPE: 준비됨
• CWE: CWE-78 (확인됨)
• CVSS: 9.8 (NVD)
• EPSS: 0.03516
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Finance, Pharma, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7614
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7614
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7614/