Lucene search
Veracode Vulnerability DatabaseVERACODE:39508HistoryMar 03, 2023 - 6:45 p.m.
Command Injection
2023-03-0318:45:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
command injection
vulnerability
user-input
sanitization
devinstall
arbitrary commands
software
0.002 Low
EPSS
Percentile
61.7%
create-choo-electron is vulnerable to Command Injection. The vulnerability exists due to improper user-input sanitization in the devinstall function, which allows an attacker to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| create-choo-electron | le | 2.0.0 | |
| create-choo-electron | le | 2.0.0 |
Related
cve
cve
CVE-2022-25908
2023-01-26 21:15:31
cvelist
cvelist
CVE-2022-25908
2023-01-24 05:00:01
nvd
nvd
CVE-2022-25908
2023-01-26 21:15:31
ibm
ibm
osv
osv
Command Injection in create-choo-electron
2023-01-26 21:30:25
prion
prion
Command injection
2023-01-26 21:15:00
github
github
Command Injection in create-choo-electron
2023-01-26 21:30:25