CVE-2020-7688

2020-07-0117:15:14

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

JSON

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

CPENameOperatorVersion
mversioneq0.5.1
mversioneq1.10.0
mversioneq0.2.2
mversioneq1.6.1
mversioneq1.2.0
mversioneq0.1.2
mversioneq1.12.0
mversioneq0.3.0
mversioneq1.8.0
mversioneq1.0.0

Name	Operator	Version
mversion	eq	0.5.1
mversion	eq	1.10.0
mversion	eq	0.2.2
mversion	eq	1.6.1
mversion	eq	1.2.0
mversion	eq	0.1.2
mversion	eq	1.12.0
mversion	eq	0.3.0
mversion	eq	1.8.0
mversion	eq	1.0.0