Lucene search
+L

9 matches found

OSV
OSV
•added 2021/03/25 9:06 p.m.•75 views

GHSA-8MRF-64FW-2X75 Command injection in fs-path

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

9.8CVSS5.9AI score0.11168EPSS
SaveExploits1References4
OSV
OSV
•added 2021/03/04 8:15 p.m.•46 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

9.8CVSS7.3AI score0.11168EPSS
SaveExploits1References3
NVD
NVD
•added 2021/03/04 8:15 p.m.•53 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS0.11168EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/03/04 8:15 p.m.•10 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS8.6AI score0.11168EPSS
SaveExploits1References4
Prion
Prion
•added 2021/03/04 8:15 p.m.•29 views

Command injection

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS9.7AI score0.11168EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/03/04 7:09 p.m.•2 views

CVE-2020-8298

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the "copy", "copySync", "remove", and "removeSync" methods...

10CVSS0.11168EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•5 views

CVE-2020-8298: Improper Neutralization of Special Elements used in a Command

fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the copy, copySync, remove, and removeSync methods...

10CVSS5.8AI score0.11168EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/03/04 12:00 a.m.•21 views

fs-path 命令注入漏洞

Mojin fs-path is Mojin an open source application . It provides the ability to scan files recursively or through filters. A command injection vulnerability exists in the fs-path node module before 0.0.25, which stems from the vulnerability of the fs-path node module to a user's use of "copy",...

10CVSS8.3AI score0.11168EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•0 views

PT-2021-12727

Name of the Vulnerable Software and Affected Versions: fs-path node module versions prior to 0.0.25 Description: The issue concerns command injection via user-supplied inputs through specific methods. The copy, copySync, remove, and removeSync methods are vulnerable to this type of attack...

10CVSS0.11168EPSS
SaveExploits1References4
Rows per page
Query Builder