Lucene search
GoogleOSV:CVE-2020-7609HistoryApr 27, 2020 - 10:15 p.m.
CVE-2020-7609
2020-04-2722:15:00
Google
osv.dev
4
node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function “fromJSON()” can be controlled by users without any sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-rules | eq | 4.0.2 | |
| node-rules | eq | 3.0.0 |
Related
cve
cve
CVE-2020-7609
2020-04-27 22:15:12
veracode
veracode
OS Command Injection
2020-03-17 06:33:48
github
github
Code Injection in node-rules
2021-12-10 20:05:37
osv
osv
Code Injection in node-rules
2021-12-10 20:05:37
cvelist
cvelist
CVE-2020-7609
2020-04-27 21:06:35
prion
prion
Design/Logic Flaw
2020-04-27 22:15:00
nvd
nvd
CVE-2020-7609
2020-04-27 22:15:12