Количество 2
Количество 2
CVE-2020-7602
node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization.
GHSA-f8fh-8rgm-227h
OS Command Injection in node-prompt-here
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-7602 node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization. | CVSS3: 9.8 | 0% Низкий | почти 6 лет назад |
| GHSA-f8fh-8rgm-227h OS Command Injection in node-prompt-here | CVSS3: 9.8 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу