CVE-2020-7675
Code Injection in cd-messenger
Summary
Code Injection in cd-messenger
Original description
The description as published by the source.
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the color argument executed by the eval function resulting in code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
cd-messenger
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.7.26"}]}]
References
- advisory nvd.nist.gov
- web snyk.io