9.8
CVE-2022-21186
- EPSS 12.6%
- Published 05.08.2022 05:15:07
- Last modified 21.11.2024 06:44:03
- Source report@snyk.io
- Teams watchlist Login
- Open Login
The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.
Data is provided by the National Vulnerability Database (NVD)
Acrontum ≫ Filesystem-template SwPlatformnode.js Version < 0.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 12.6% | 0.937 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| report@snyk.io | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|