Lucene search
Сковорода Никита АндреевичNODEJS:604HistoryApr 24, 2018 - 8:51 p.m.
Command Injection
2018-04-2420:51:25
Сковорода Никита Андреевич
www.npmjs.com
477
0.003 Low
EPSS
Percentile
69.2%
Overview
Versions of whereis before 0.4.1 are vulnerable to command injection if untrusted user input is passed into whereis.
Recommendation
Update to version 0.4.1 or later.
References
Related
hackerone
hackerone
cvelist
cvelist
CVE-2018-3772
2018-03-28 00:00:00
cve
cve
CVE-2018-3772
2018-07-30 18:29:00
veracode
veracode
Arbitrary Code Execution
2018-03-29 02:41:53
prion
prion
Design/Logic Flaw
2018-07-30 18:29:00
osv
osv
Command Injection in whereis
2018-07-31 18:28:53
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2018-3772
2018-07-30 18:29:00
github
github
Command Injection in whereis
2018-07-31 18:28:53
Command Injection in standard-version
2020-07-13 21:34:59