4 matches found
CVE-2020-7627
node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute' function...
9.8CVSS7.3AI score0.04118EPSS
SaveExploits1References1
CVE-2020-7627
node-key-sender through 1.0.11 is vulnerable to Command Injection. It allows execution of arbitrary commands via the 'arrParams' argument in the 'execute' function...
9.8CVSS9.7AI score0.04118EPSS
SaveExploits1References2
CVE-2020-7627
The CVE refers to the npm module node-key-sender (versions up to 1.0.11 and earlier). The root cause is a Command Injection in the function that uses the arrParams argument of the execute() method, allowing execution of arbitrary commands. Multiple connected sources (Red Hat, Snyk, Veracode, CNVD...
9.8CVSS9.7AI score0.04118EPSS
SaveExploits1References2Affected Software1
20