311 matches found
ROS-20220516-01
A vulnerability in shelljs, an implementation of Unix shell commands on top of the Node.js API, is related to the fact that the application does not properly enforce security restrictions. Exploitation of the vulnerability could allow an attacker to bypass security restrictions and escalate...
Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4.3 security updates and bug fixes
Red Hat Advanced Cluster Management for Kubernetes 2.4.3 General Availability release images. This update provides security fixes, bug fixes, and updates the container images. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24223 more potentially affected by CVE-2022-0144 via shelljs (>=0.0.2, <=0.8.4)
shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: CVE-2022-0144 Source advisory: OSV:GHSA-4RQ4-32RV-6WP6...
GHSA-4RQ4-32RV-6WP6 Improper Privilege Management in shelljs
shelljs is vulnerable to Improper Privilege Management...
Improper Privilege Management in shelljs
shelljs is vulnerable to Improper Privilege Management...
10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24223 more potentially affected by CVE-2022-0144 via shelljs (>=0.0.2, <=0.8.4)
shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: CVE-2022-0144 Source advisory: GHSA-4RQ4-32RV-6WP6...
CVE-2022-0144
A flaw was found in the ShellJS library when the scripts used the exec function. Local users on the filesystem could take advantage of this as they can read the stdout of the ShellJS process. This issue discloses sensitive information, leading to privilege escalation. This flaw allows an attacker...
shelljs Access Control Error Vulnerability
shelljs is a portable Windows/Linux/OS X implementation of Unix shell commands based on the Node.js API. A security vulnerability exists in shelljs that stems from improper privilege management and can be exploited by an attacker to gain unauthorized access...
10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24223 more potentially affected by unknown CVE via shelljs (>=0.0.2, <=0.8.4)
shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-64G7-MVW6-V9QJ...
GHSA-64G7-MVW6-V9QJ Improper Privilege Management in shelljs
Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...
Improper Privilege Management in shelljs
Impact Output from the synchronous version of shell.exec may be visible to other users on the same system. You may be affected if you execute shell.exec in multi-user Mac, Linux, or WSL environments, or if you execute shell.exec as the root user. Other shelljs functions including the asynchronous...
10chars-test (>=1.0.4, <=1.0.34), 12g (>=0.0.16, <=1.0.1) +24223 more potentially affected by unknown CVE via shelljs (>=0.0.2, <=0.8.4)
shelljs NPM version =0.0.2, =1.0.4, =0.0.16, =1.3.0, =1.0.0, =1.0.2, =1.0.0, =0.0.3, =1.0.0, =1.0.3, =2.11.4, =2.0.0, =2.11.4, =2.13.7 and more Source cves: unknown CVE Source advisory: GHSA-64G7-MVW6-V9QJ...
PT-2022-28205
Name of the Vulnerable Software and Affected Versions shelljs versions prior to 0.8.5 Description The issue affects the synchronous version of the shell.exec function, potentially allowing output to be visible to other users on the same system, particularly in multi-user environments on Mac, Linu...
Information Disclosure
shelljs is vulnerable to information disclosure. The vulnerability exists in ShellJS exec function of exec.js because the file permissions have not been locked down which allows an attacker to gain access to sensitive information of file system of the running scripts and crash application...
CVE-2022-0144
shelljs is vulnerable to Improper Privilege Management...
DEBIAN-CVE-2022-0144
shelljs is vulnerable to Improper Privilege Management...
CVE-2022-0144
shelljs is vulnerable to Improper Privilege Management...
Input validation
shelljs is vulnerable to Improper Privilege Management...
