GitHub Advisoryadvisory · npm
GHSA-m5v8-wpw4-rj3x abacus-ext-cmdline vulnerable to Command Injection
HIGH
Official page ↗
- Aliases
- CVE-2022-24431
- Ecosystem
- npm
- Packages
- abacus-ext-cmdline
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
- Reviewed
- 2022-12-21
Affected packages
• npm abacus-ext-cmdline: <= 0.0.6-dev.9 (no fix yet)
Description
All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.
Related
Alias · CVE (1)
- CVE-2022-24431 All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input… vulnerability
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness