4 matches found
CVE-2020-7634
heroku-addonpool through 0.1.15 is vulnerable to Command Injection...
9.8CVSS6.9AI score0.02787EPSS
SaveExploits1References1
CVE-2020-7634
creationtimestamp| type| source ---|---|--- 2021-12-09 19:52:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3q9x-w53p-jg53...
9.8CVSS7.3AI score0.02787EPSS
SaveExploits1References1
CVE-2020-7634
CVE-2020-7634 affects the npm package heroku-addonpool up to version 0.1.15. The vulnerability is a command injection flaw where the second parameter of the exported function HerokuAddonPool(id, app, opt) can be controlled by an attacker without sanitization. A PoC demonstrates exploiting this to...
9.8CVSS9.5AI score0.02787EPSS
SaveExploits1References2Affected Software1
20