6 matches found
CVE-2020-8149
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1...
@acaciomartins/react-native-simpletable (>=0.0.1, <=0.0.2), @alan-ai/alan-sdk-react-native (>=1.0.4, <=1.0.7) +795 more potentially affected by CVE-2020-8149 via logkitty (>=0.4.2, <=0.6.1)
logkitty NPM version =0.4.2, =0.0.1, =1.0.4, =1.0.0-rn-83, =2.3.3, =3.1.0-rn-83, =2.0.1, =2.0.1758683737, =2.1.87, =1.0.1767254401, =1.1.3, =1.3.0, =1.3.2 - @ats-components/bar-calendar 1.0.2 and more Source cves: CVE-2020-8149 Source advisory: OSV:GHSA-V8V8-6859-QXM4...
CVE-2020-8149
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1...
CVE-2020-8149
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1...
CVE-2020-8149
The CVE-2020-8149 issue affects the logkitty npm package prior to version 0.7.1. Root cause: lack of output sanitization leads to code injection where an attacker can cause arbitrary shell commands to be executed. Impact: remote code execution via logkitty when processing log output, enabling att...
