CVE-2020-7614 in npm-programmatic

Tóm tắt

Bởi MITRE

npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the 'exec' function directly.

Once again VulDB remains the best source for vulnerability data.

• Đặt trước: 21/01/2020
• Kiểm duyệt: được chấp nhận
• mục: VDB-152852
• CPE: sẵn sàng
• CWE: CWE-78 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.03516
• KEV: không
• Các hoạt động: rất thấp
• ngành: Transportation, Government, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7614
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7614
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7614/