Lucene search
Veracode Vulnerability DatabaseVERACODE:28590HistoryDec 14, 2020 - 6:36 a.m.
Command Injection
2020-12-1406:36:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
57.6%
node-notifier is vulnerable to remote code execution (RCE). An attacker can send malicious commands via options params as it is not sanitized when being passed as an array.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node-notifier | le | 8.0.0 | |
| node-notifier | le | 5.4.5 |
Related
cve
cve
CVE-2020-7789
2020-12-11 10:15:12
redhatcve
redhatcve
CVE-2020-7789
2020-12-11 14:56:51
github
github
OS Command Injection in node-notifier
2020-12-21 16:04:07
nvd
nvd
CVE-2020-7789
2020-12-11 10:15:12
osv
osv
OS Command Injection in node-notifier
2020-12-21 16:04:07
CVE-2020-7789
2020-12-11 10:15:12
cvelist
cvelist
CVE-2020-7789 Command Injection
2020-12-11 00:00:00
prion
prion
Design/Logic Flaw
2020-12-11 10:15:00
ibm
ibm
redhat
redhat
nessus
nessus
RHEL 7 / 8 : Red Hat Ansible Automation Platform 1.2.2 (RHSA-2021:0781)
2024-04-28 00:00:00