GitHub Advisoryadvisory · npm

GHSA-hwxp-6qf7-q3rc Remote command execution in promptr

HIGH Published 2024-09-25 Modified 2024-09-26 Official page ↗

Aliases: CVE-2024-46489
Ecosystem: npm
Packages: @ifnotnowwhen/promptr
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-94
Reviewed: 2024-09-26

Affected packages

• npm @ifnotnowwhen/promptr: <= 6.0.7 (no fix yet)

Description

A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL.

Related

Alias · CVE (1)

CVE-2024-46489 A remote command execution (RCE) vulnerability in promptr v6.0.7 allows attackers to execute arbitrary commands via a crafted URL. vulnerability

Weakness · CWE (1)

CWE-94 Improper Control of Generation of Code weakness

References