CVE-2020-7675
Code Injection in cd-messenger
Résumé
Code Injection in cd-messenger
Description d'origine
La description telle que publiée par la source (souvent en anglais).
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the color argument executed by the eval function resulting in code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
cd-messenger
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.7.26"}]}]
Références
- advisory nvd.nist.gov
- web snyk.io