5 matches found
CVE-2022-25350
All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...
7.8CVSS7.2AI score0.01219EPSS
SaveExploits1References1
CVE-2022-25350
All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization...
7.8CVSS7.8AI score0.01219EPSS
SaveExploits1References2
CVE-2022-25350
CVE-2022-25350 affects the Node.js module puppet-facter . The vulnerability is a command injection in the getFact function caused by improper input sanitization . It is a local attack with high impact on confidentiality, integrity, and availability (CVSS 3.1 base 7.8). Affected: all versions (no ...
7.8CVSS7.8AI score0.01219EPSS
SaveExploits1References2Affected Software1
20