Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Node-prompt-here Project Subscribe
Filtered by product Node-prompt-here
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7602 1 Node-prompt-here Project 1 Node-prompt-here 2021-07-21 7.5 HIGH 9.8 CRITICAL
node-prompt-here through 1.0.1 allows execution of arbitrary commands. The "runCommand()" is called by "getDevices()" function in file "linux/manager.js", which is required by the "index. process.env.NM_CLI" in the file "linux/manager.js". This function is used to construct the argument of function "execSync()", which can be controlled by users without any sanitization.