Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2022/08/05 5:00 a.m.•30 views

CVE-2022-21186 Arbitrary Command Injection

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input...

9.8CVSS10AI score0.25401EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•3 views

CVE-2022-21186: Undefined Security Weakness

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input...

9.8CVSS8.2AI score0.25401EPSS
SaveExploits1References1
Rows per page
Query Builder