Skip to content

command injection vulnerability

Moderate
sebhildebrandt published GHSA-94xh-2fmc-xf5j Oct 27, 2020

Package

npm systemonformation (npm)

Affected versions

<4.27.11

Patched versions

4.27.11

Description

Impact

command injection vulnerability

Patches

Problem was fixed with a shell string sanitation fix. Please upgrade to version >= 4.27.11

Workarounds

If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite()

References

Are there any links users can visit to find out more?

For more information

If you have any questions or comments about this advisory:

Severity

Moderate

CVE ID

CVE-2020-7752

Weaknesses

No CWEs