Lucene search
SnykCVELIST:CVE-2022-25923HistoryJan 06, 2023 - 5:00 a.m.
CVE-2022-25923
2023-01-0605:00:01
snyk
www.cve.org
package vulnerability
command injection
user input validation
7.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P
10 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.3%
Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.
CNA Affected
[
{
"product": "exec-local-bin",
"versions": [
{
"version": "0",
"lessThan": "1.2.0",
"status": "affected",
"versionType": "semver"
}
],
"vendor": "n/a"
}
]Related
osv
osv
CVE-2022-25923
2023-01-06 05:15:11
exec-local-bin vulnerable to Command Injection
2023-01-06 06:30:25
cve
cve
CVE-2022-25923
2023-01-06 05:15:11
prion
prion
Command injection
2023-01-06 05:15:00
nvd
nvd
CVE-2022-25923
2023-01-06 05:15:11
veracode
veracode
Command Injection
2023-01-15 21:58:16
github
github
exec-local-bin vulnerable to Command Injection
2023-01-06 06:30:25
7.4 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P
10 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.3%
Related for CVELIST:CVE-2022-25923