CVE-2020-8298

2021-03-0419:09:22

CWE-77

hackerone

www.cve.org

command injection

fs-path

user-supplied inputs

copy

remove

cve-2020-8298

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.9%

JSON

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods.

CNA Affected

[
  {
    "product": "fs-path",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 0.0.25"
      }
    ]
  }
]