CVE-2020-7603
N/A
N/A
Summary
closure-compiler-stream through 0.1.15 allows execution of arbitrary commands. The argument "options" of the exports function in "index.js" can be controlled by users without any sanitization.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | closure-compiler-stream | All versions including 0.1.15 | affected |
Weaknesses
- Command Injection
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.