CVE-2020-7674
N/A
N/A
Summary
access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | access-policy | All versions including 3.1.0 | affected |
Weaknesses
- Arbitrary Code Execution
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.