Lucene search
GoogleOSV:GHSA-48WW-J4FC-435PHistoryMay 10, 2021 - 7:16 p.m.
Command injection in nodemailer
2021-05-1019:16:52
Google
osv.dev
22
0.025 Low
EPSS
Percentile
90.3%
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nodemailer | lt | 6.4.16 |
References
github.com/nodemailer/nodemailer/blob/33b62e2ea6bc9215c99a9bb4bfba94e2fb27ebd0/lib/sendmail-transport/index.js#L75
github.com/nodemailer/nodemailer/blob/33b62e2ea6bc9215c99a9bb4bfba94e2fb27ebd0/lib/sendmail-transport/index.js%23L75
github.com/nodemailer/nodemailer/commit/ba31c64c910d884579875c52d57ac45acc47aa54
nvd.nist.gov/vuln/detail/CVE-2020-7769
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1039742
snyk.io/vuln/SNYK-JS-NODEMAILER-1038834
www.npmjs.com/package/nodemailer
Related
debiancve
debiancve
CVE-2020-7769
2020-11-12 09:15:11
nodejs
nodejs
Command Injection
2021-05-10 19:18:06
ibm
ibm
ubuntucve
ubuntucve
CVE-2020-7769
2020-11-12 00:00:00
osv
osv
CVE-2020-7769
2020-11-12 09:15:11
cvelist
cvelist
CVE-2020-7769 Command Injection
2020-11-12 00:00:00
cve
cve
CVE-2020-7769
2020-11-12 09:15:11
veracode
veracode
Command Injection
2020-11-13 04:43:13
prion
prion
Command injection
2020-11-12 09:15:00
nvd
nvd
CVE-2020-7769
2020-11-12 09:15:11
github
github
Command injection in nodemailer
2021-05-10 19:16:52