Lucene search

Command injection in workspace-tools

🗓️ 14 May 2022 00:08:01Reported by GitHub Advisory DatabaseType

Command injection vulnerability in workspace-tools packag

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 7
OSV	CVE-2022-25865	13 May 202220:15	–	osv
OSV	Command injection in workspace-tools	14 May 202200:01	–	osv
CVE	CVE-2022-25865	13 May 202220:15	–	cve
Cvelist	CVE-2022-25865 Command Injection	13 May 202220:00	–	cvelist
NVD	CVE-2022-25865	13 May 202220:15	–	nvd
Prion	Command injection	13 May 202220:15	–	prion
Veracode	Command Injection	17 May 202209:12	–	veracode

Vulners

Node

microsoft workspace-toolsRange<0.18.4

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25865
github	www.github.com/microsoft/workspace-tools/pull/103
github	www.github.com/microsoft/workspace-tools/commit/9bc7e65ce497f87e1f363fd47b8f802f3d3cd978
snyk	www.snyk.io/vuln/SNYK-JS-WORKSPACETOOLS-2421201
github	www.github.com/advisories/GHSA-5875-m6jq-vf78

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2022 00:01Current

4Medium risk

Vulners AI Score4

CVSS27.5

CVSS38.1 - 9.8

EPSS0.00466

CWE-77