Lucene search
Veracode Vulnerability DatabaseVERACODE:25657HistoryJun 11, 2020 - 7:15 a.m.
Arbitrary Code Execution
2020-06-1107:15:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.085 Low
EPSS
Percentile
94.5%
cd-messenger is vulnerable to arbitrary code execution. Untrusted user input to the color argument is passed to the eval function without validation, allowing an attacker to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cd-messenger | le | 2.7.26 |
Related
osv
osv
CVE-2020-7675
2020-06-10 16:15:10
Code Injection in cd-messenger
2021-05-17 21:00:24
nvd
nvd
CVE-2020-7675
2020-06-10 16:15:10
github
github
Code Injection in cd-messenger
2021-05-17 21:00:24
prion
prion
Remote code execution
2020-06-10 16:15:00
cve
cve
CVE-2020-7675
2020-06-10 16:15:10
cvelist
cvelist
CVE-2020-7675
2020-06-10 15:36:01