PT-2023-12664 · Unknown · Global-Modules-Path

🗓️ 13 Jan 2023 00:00:00Reported by Positive TechnologiesType

Global modules path is vulnerable to command injection via getPath before 3.0.0; upgrade to 3.0.0+ and restrict access.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2022-21191	13 Jan 202307:31	–	circl
CNNVD	global-modules-path 安全漏洞	13 Jan 202300:00	–	cnnvd
CVE	CVE-2022-21191	13 Jan 202305:00	–	cve
Cvelist	CVE-2022-21191	13 Jan 202305:00	–	cvelist
EUVD	EUVD-2023-0565	3 Oct 202520:07	–	euvd
Github Security Blog	global-modules-path Command Injection vulnerability	13 Jan 202306:30	–	github
NVD	CVE-2022-21191	13 Jan 202305:15	–	nvd
OSV	GHSA-VVJ3-85VF-FGMW global-modules-path Command Injection vulnerability	13 Jan 202306:30	–	osv
Prion	Command injection	13 Jan 202305:15	–	prion
RedhatCVE	CVE-2022-21191	2 Feb 202318:14	–	redhatcve

Source	Link
github	www.github.com/rosen-vladimirov/global-modules-path/commit/edbdaff077ea0cf295b1469923c06bbccad3c180
osv	www.osv.dev/vulnerability/GHSA-vvj3-85vf-fgmw
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-21191
osv	www.osv.dev/vulnerability/CVE-2022-21191
github	www.github.com/rosen-vladimirov/global-modules-path
github	www.github.com/rosen-vladimirov/global-modules-path/releases/tag/v3.0.0
t	www.t.me/cvenotify/117766
security	www.security.snyk.io/vuln/SNYK-JS-GLOBALMODULESPATH-3167973
web	www.web.archive.org/web/20250000000000*/https:/github.com/lorenzomigliorero/npm-node-utils/blob/b55dd81c597db657c9751332bb2242403fd3e26b/index.js%23L186
t	www.t.me/cibsecurity/56479

04 Apr 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.4 - 9.8

EPSS0.0065

SSVC