CVE-2020-36199

2021-01-2121:20:28

Kaspersky

www.cve.org

tinycheck

command injection

vulnerability

commits 9fd360d

commits ea53de8

input parameters

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

55.2%

JSON

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.

CNA Affected

[
  {
    "product": "Kaspersky TinyCheck",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "without commits 9fd360d and ea53de8"
      }
    ]
  }
]

References

github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-j2vj-mhr6-795m