CVE-2022-25350

CVE-2022-25350 affects the Node.js module puppet-facter . The vulnerability is a command injection in the getFact function caused by improper input sanitization . It is a local attack with high impact on confidentiality, integrity, and availability (CVSS 3.1 base 7.8). Affected: all versions (no ...