Lucene search
CVE-2020-15228
`Vulnerability in @actions/core npm module allows unauthorized modification of path and environment variables through stdout communication. Users urged to update to v1.2.6 or later and replace set-env and add-path commands in workflows.
Show more
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Environment Variable Injection in GitHub Actions | 1 Oct 202017:16 | – | osv |
 | Environment Variable Injection in GitHub Actions | 1 Oct 202017:16 | – | github |
 | Improper Input Validation | 1 Oct 202000:00 | – | gitlab |
 | Environment Variables Tampering | 2 Oct 202004:37 | – | veracode |
 | CVE-2020-15228 Environment Variable Injection in GitHub Actions | 1 Oct 202017:25 | – | cvelist |
 | Design/Logic Flaw | 1 Oct 202018:15 | – | prion |
 | Exploit for Command Injection in Toolkit Project Toolkit | 12 Nov 202011:59 | – | githubexploit |
 | CVE-2020-15228 | 1 Oct 202018:15 | – | cve |
 | Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities | 26 Mar 202504:10 | – | ibm |
Node
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo01 Oct 2020 18:15Current
CVSS24
CVSS35
EPSS0.00322