4 matches found
CVE-2020-7607
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization...
9.8CVSS9.5AI score0.02575EPSS
SaveExploits1References1
CVE-2020-7607
gulp-styledocco through 0.0.3 allows execution of arbitrary commands. The argument 'options' of the exports function in 'index.js' can be controlled by users without any sanitization...
9.8CVSS7.1AI score
SaveExploits0References1
CVE-2020-7607
The CVE-2020-7607 issue affects gulp-styledocco up to version 0.0.3, where the options parameter of the exports function in index.js can be controlled by users without sanitization, enabling command execution (OS Command Injection). Exploitation details or in-the-wild status are not provided in t...
9.8CVSS9.5AI score0.02575EPSS
SaveExploits1References1Affected Software1
20