En bref
- CVE-2020-7789 est une vulnérabilité MOYENNE (CVSS 5.6) touchant node-notifier (node-notifier project), node-notifier.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.6%, plus élevée que 75.8% des vulnérabilités.
- Correctif : mettre à jour vers 8.0.1 ou plus récent.
Description
This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
NVD description
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free