Lucene search
Veracode Vulnerability DatabaseVERACODE:25402HistoryMay 13, 2020 - 8:08 a.m.
Command Injection
2020-05-1308:08:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.003
Percentile
70.8%
chrome-launcher is vulnerable to Command Injection. The vulnerability exists because an attacker can get control of the $HOME environment variable in Linux operating systems, leading to an execution of malicious command.
Related
cve
cve
CVE-2020-7645
2020-05-02 16:15:11
cvelist
cvelist
CVE-2020-7645
2020-05-02 15:25:12
osv
osv
CVE-2020-7645
2020-05-02 16:15:11
chrome-launcher subject to OS Command Injection
2022-05-24 17:17:04
nvd
nvd
CVE-2020-7645
2020-05-02 16:15:11
prion
prion
Design/Logic Flaw
2020-05-02 16:15:00
redhatcve
redhatcve
CVE-2020-7645
2020-05-08 16:42:29
github
github
chrome-launcher subject to OS Command Injection
2022-05-24 17:17:04