Command Injection in systeminformation

🗓️ 27 Oct 2020 20:00:40Reported by GitHub Advisory DatabaseType

Command Injection vulnerability patched with shell string sanitation fix. Upgrade to version >= 4.26.2 or sanitize service parameter strings passed to specific functions if unable to upgrade

Reporter	Title	Published	Views	Family All 7
Prion	Command injection	9 Sep 202101:15	–	prion
Cvelist	CVE-2020-26300 Command injection in systeminformation	9 Sep 202101:10	–	cvelist
OSV	Command Injection in systeminformation	27 Oct 202020:40	–	osv
OSV	CVE-2020-26300	9 Sep 202101:15	–	osv
Veracode	Command Injection	10 Sep 202103:17	–	veracode
NVD	CVE-2020-26300	9 Sep 202101:15	–	nvd
CVE	CVE-2020-26300	9 Sep 202101:15	–	cve

Vulners

Node

systeminformation systeminformationRange<4.26.2

Source	Link
github	www.github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-fj59-f6c3-3vw4
github	www.github.com/sebhildebrandt/systeminformation/commit/bad372e654cdd549e7d786acbba0035ded54c607
npmjs	www.npmjs.com/package/systeminformation
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26300
github	www.github.com/advisories/GHSA-fj59-f6c3-3vw4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2020 20:40Current

3.8Low risk

Vulners AI Score3.8

CVSS27.5

CVSS35.9 - 9.8

EPSS0.015

CWE-78