Lucene search
HistoryJul 25, 2022 - 2:15 p.m.
CVE-2020-28443
cve
2020
28443
sonar-wrapper
injection
vulnerability
nvd
security
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.3%
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
Affected configurations
Node
sonar-wrapper_projectsonar-wrappernode.js
| CPE | Name | Operator | Version |
|---|---|---|---|
| sonar-wrapper_project:sonar-wrapper | sonar-wrapper project sonar-wrapper | eq | * |
CNA Affected
[
{
"product": "sonar-wrapper",
"vendor": "n/a",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Social References
More
Related
cvelist
cvelist
CVE-2020-28443 Command Injection
2022-07-25 00:00:00
prion
prion
Design/Logic Flaw
2022-07-25 14:15:00
github
github
sonar-wrapper Command Injection vulnerability
2022-07-26 00:01:05
osv
osv
sonar-wrapper Command Injection vulnerability
2022-07-26 00:01:05
nvd
nvd
CVE-2020-28443
2022-07-25 14:15:09
veracode
veracode
Command Injection
2022-07-26 07:07:41
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
65.3%
Related for CVE-2020-28443