Lucene search
Veracode Vulnerability DatabaseVERACODE:22728HistoryMar 17, 2020 - 8:09 a.m.
Remote Code Execution (RCE)
2020-03-1708:09:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.01
Percentile
83.8%
node-prompt-here is vulnerable to remote code execution (RCE). The runCommand() of the file linux/manager.js accepts user-provided arguments without sanitization, allowing the user to get the control over the index. process.env.NM_CLI.
Related
osv
osv
CVE-2020-7602
2020-03-15 22:15:14
OS Command Injection in node-prompt-here
2021-05-07 16:16:16
github
github
OS Command Injection in node-prompt-here
2021-05-07 16:16:16
cve
cve
CVE-2020-7602
2020-03-15 22:15:14
cvelist
cvelist
CVE-2020-7602
2020-03-15 21:26:22
prion
prion
Design/Logic Flaw
2020-03-15 22:15:00
nvd
nvd
CVE-2020-7602
2020-03-15 22:15:14