Lucene search
GoogleOSV:GHSA-F78F-353M-CF4JHistoryDec 10, 2021 - 8:05 p.m.
Code Injection in node-rules
2021-12-1020:05:37
Google
osv.dev
8
0.004 Low
EPSS
Percentile
72.1%
node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function “fromJSON()” can be controlled by users without any sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-rules | lt | 5.0.0 | |
| node-rules | ge | 3.0.0 |
Related
cve
cve
CVE-2020-7609
2020-04-27 22:15:12
veracode
veracode
OS Command Injection
2020-03-17 06:33:48
osv
osv
CVE-2020-7609
2020-04-27 22:15:00
github
github
Code Injection in node-rules
2021-12-10 20:05:37
cvelist
cvelist
CVE-2020-7609
2020-04-27 21:06:35
prion
prion
Design/Logic Flaw
2020-04-27 22:15:00
nvd
nvd
CVE-2020-7609
2020-04-27 22:15:12