CVE-2020-7601
N/A
N/A
Summary
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | gulp-scss-lint | All versions including 1.0.0 | affected |
Weaknesses
- Command Injection
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.