Lucene search
Veracode Vulnerability DatabaseVERACODE:22942HistoryApr 06, 2020 - 5:37 a.m.
Remote Code Execution (RCE)
2020-04-0605:37:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.012 Low
EPSS
Percentile
85.4%
install-package is vulnerable to remote code execution (RCE). The attack is possible due to lack of sanitization of options parameter, allowing an attack to take the control of it and execute malicious code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| install-package | le | 0.4.0 |
Related
osv
osv
OS Command Injection in install-package
2022-02-10 23:48:06
CVE-2020-7629
2020-04-02 22:15:14
cvelist
cvelist
CVE-2020-7629
2020-04-02 21:38:31
prion
prion
Command injection
2020-04-02 22:15:00
nvd
nvd
CVE-2020-7629
2020-04-02 22:15:14
cve
cve
CVE-2020-7629
2020-04-02 22:15:14
github
github
OS Command Injection in install-package
2022-02-10 23:48:06