CVE-2020-7675

2020-06-1016:15:10

Google

osv.dev

7.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

JSON

cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the color argument executed by the eval function resulting in code execution.

CPENameOperatorVersion
cd-messengereq2.2.1-build.7
cd-messengereq2.7.21
cd-messengereq2.0.0-build.210
cd-messengereq2.7.1
cd-messengereq2.7.5
cd-messengereq2.6.0
cd-messengereq2.5.2
cd-messengereq2.7.24
cd-messengereq2.7.8
cd-messengereq2.2.1-build.24

Name	Operator	Version
cd-messenger	eq	2.2.1-build.7
cd-messenger	eq	2.7.21
cd-messenger	eq	2.0.0-build.210
cd-messenger	eq	2.7.1
cd-messenger	eq	2.7.5
cd-messenger	eq	2.6.0
cd-messenger	eq	2.5.2
cd-messenger	eq	2.7.24
cd-messenger	eq	2.7.8
cd-messenger	eq	2.2.1-build.24