Lucene search
GoogleOSV:GHSA-HWCH-749C-RV63HistoryAug 31, 2020 - 10:46 p.m.
Potential Command Injection in hubot-scripts
2020-08-3122:46:38
Google
osv.dev
11
0.003 Low
EPSS
Percentile
70.4%
Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module.
Mitigating Factors
The email script is not enabled by default, it has to be manually added to hubot’s list of loaded scripts.
Recommendation
Update hubot-scripts to version 2.4.4 or later.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hubot-scripts | lt | 2.4.5 |
Related
cve
cve
CVE-2013-7378
2020-02-12 14:15:10
github
github
Potential Command Injection in hubot-scripts
2020-08-31 22:46:38
cvelist
cvelist
CVE-2013-7378
2020-02-12 13:59:50
prion
prion
Command injection
2020-02-12 14:15:00
nvd
nvd
CVE-2013-7378
2020-02-12 14:15:10
ubuntucve
ubuntucve
CVE-2013-7378
2020-02-12 00:00:00
nodejs
nodejs
Potential Command Injection
2015-10-17 19:41:46
securityvulns
securityvulns