9.8
CVE-2022-21186
- EPSS 11.16%
- Veröffentlicht 05.08.2022 05:15:07
- Zuletzt bearbeitet 21.11.2024 06:44:03
- Quelle report@snyk.io
- CVE-Watchlists
- Unerledigt
LoginThe package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acrontum ≫ Filesystem-template SwPlatformnode.js Version < 0.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 11.16% | 0.932 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| report@snyk.io | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|