HOMEVULNERABILITIESVENDORSNode-prompt-here Project

Node-prompt-here ProjectCVEs & Vulnerabilities

1 CVEs affecting Node-prompt-here Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

node-prompt-here 1
CVE-2020-7602CRITICAL

node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization.

16 Mar 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Node-prompt-here Project CVEs & Vulnerabilities — 1 Tracked