CVE-2020-8186

2020-07-1015:37:18

CWE-77

hackerone

www.cve.org

0.003 Low

EPSS

Percentile

68.8%

JSON

A command injection vulnerability in the devcert module may lead to remote code execution when users of the module pass untrusted input to the certificateFor function.

CNA Affected

[
  {
    "product": "devcert",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed Version: 1.1.1"
      }
    ]
  }
]

References

hackerone.com/reports/863544

0.003 Low

EPSS

Percentile

68.8%

JSON

Related for CVELIST:CVE-2020-8186