Lucene search
Veracode Vulnerability DatabaseVERACODE:25796HistoryJul 02, 2020 - 2:17 a.m.
OS Command Injection
2020-07-0202:17:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.004 Low
EPSS
Percentile
72.7%
mversion is vulnerable to OS Command Injection. The vulnerability exists as the value of tagName in lib/git.js is passed to cp.exec() without validation or sanitization, allowing an attacker to inject and execute arbitrary code.
Related
prion
prion
Design/Logic Flaw
2020-07-01 17:15:00
cve
cve
CVE-2020-7688
2020-07-01 17:15:14
nvd
nvd
CVE-2020-7688
2020-07-01 17:15:14
osv
osv
OS Command Injection in mversion
2021-05-17 21:01:08
CVE-2020-7688
2020-07-01 17:15:14
cvelist
cvelist
CVE-2020-7688 Command Injection
2020-07-01 00:00:00
github
github
OS Command Injection in mversion
2021-05-17 21:01:08