GHSA-M57P-P67H-MQ74 Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.31.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency For more information If you have any...

Command Injection Vulnerability in systeminformation

Impact command injection vulnerability Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version = 4.31.1 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency For more information If you have any...

CVE-2020-26274: Improper Neutralization of Special Elements used in an OS Command

In systeminformation npm package before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix...

Systeminformation Operating System Command Injection Vulnerability

systeminformation is an Npm software library that can obtain information about the operating system. A vulnerability in operating system command injection existed in versions prior to systeminformation npm package version 4.31.1, which stemmed from this issue fixed in version 4.31.1, and fixed a...

PT-2020-16396

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.31.1 Description The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix. There is no information about the estimated number of potentially affected devices worldwid...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +27 more potentially affected by CVE-2020-26274 via systeminformation (>=4.0.9, <=4.31.0)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =5.2.0, =5.2.1 and more Source cves: CVE-2020-26274 Source...

Command Injection

Overview systeminformation is a simple system and OS information library. Affected versions of this package are vulnerable to Command Injection. The sanitizeShellString function does not sanitize quotation marks, which could be leveraged by an attacker to execute arbitrary commands. PoC const si ...

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

DEBIAN-CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

Command injection

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

CVE-2020-26245

The CVE concerns the npm package systeminformation (prior to v4.30.5). A Prototype Pollution flaw can lead to Command Injection, with fixes implemented by rewriting shell sanitations to prevent pollution. Affected versions are before 4.30.5; remediation is to upgrade to v4.30.5 (or at least v4.30...

CVE-2020-26245 Prototype Pollution leading to Command Injection in systeminformation

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

GHSA-4V2W-H9JM-MQJG Prototype Pollution in systeminformation

Impact command injection vulnerability by prototype pollution Patches Problem was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. Please upgrade to version = 4.30.2 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-26245 via systeminformation (>=4.0.9, <=4.27.11)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

Prototype Pollution in systeminformation

Impact command injection vulnerability by prototype pollution Patches Problem was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. Please upgrade to version = 4.30.2 Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are...

PT-2020-16373

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.30.5 Description The issue is a command injection vulnerability caused by prototype pollution. It was fixed with a rewrite of shell sanitations to avoid prototype pollution problems. Recommendations For...

Systeminformation Operating System Command Injection Vulnerability

systeminformation is an Npm software library that can obtain operating system information. An operating system command injection vulnerability exists in versions prior to npm package systeminformation 4.30.5, which stems from the fact that npm package systeminformation is susceptible to prototype...

CVE-2020-26245: Improper Neutralization of Special Elements used in an OS Command

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...