Lucene search
GitHub_MCVELIST:CVE-2020-5282HistoryMar 25, 2020 - 6:15 p.m.
CVE-2020-5282 arbitrary shell execution in Nick Chan Bot
2020-03-2518:15:14
CWE-78
GitHub_M
www.cve.org
3
CVSS3
7.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
9.6
Confidence
High
EPSS
0.004
Percentile
73.9%
In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the npm command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta
CNA Affected
[
{
"product": "nickchanbot",
"vendor": "Nick Chan",
"versions": [
{
"status": "affected",
"version": "< 1.0.0-beta"
}
]
}
]Related
prion
prion
Command injection
2020-03-25 19:15:00
nvd
nvd
CVE-2020-5282
2020-03-25 19:15:15
cve
cve
CVE-2020-5282
2020-03-25 19:15:15
osv
osv
CVE-2020-5282
2020-03-25 19:15:15
CVSS3
7.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
9.6
Confidence
High
EPSS
0.004
Percentile
73.9%
Related for CVELIST:CVE-2020-5282