Vulnerability Details CVE-2020-36650
A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 is able to address this issue. The patch is named 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218019.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 5.2
References
- https://github.com/IonicaBizau/node-gry/commit/5108446c1e23960d65e8b973f1d9486f9f9dbd6c
- https://github.com/IonicaBizau/node-gry/pull/22
- https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0
- https://vuldb.com/?ctiid.218019
- https://vuldb.com/?id.218019
- https://github.com/IonicaBizau/node-gry/commit/5108446c1e23960d65e8b973f1d9486f9f9dbd6c
- https://github.com/IonicaBizau/node-gry/pull/22
- https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0
- https://vuldb.com/?ctiid.218019
- https://vuldb.com/?id.218019
Products affected by CVE-2020-36650
-
cpe:2.3:a:gry_project:gry:1.0.0
-
cpe:2.3:a:gry_project:gry:2.0.0
-
cpe:2.3:a:gry_project:gry:2.1.0
-
cpe:2.3:a:gry_project:gry:3.0.0
-
cpe:2.3:a:gry_project:gry:4.0.0
-
cpe:2.3:a:gry_project:gry:4.1.0
-
cpe:2.3:a:gry_project:gry:4.2.0
-
cpe:2.3:a:gry_project:gry:4.3.0
-
cpe:2.3:a:gry_project:gry:4.3.1
-
cpe:2.3:a:gry_project:gry:5.0.0
-
cpe:2.3:a:gry_project:gry:5.0.1
-
cpe:2.3:a:gry_project:gry:5.0.2
-
cpe:2.3:a:gry_project:gry:5.0.3
-
cpe:2.3:a:gry_project:gry:5.0.4
-
cpe:2.3:a:gry_project:gry:5.0.5
-
cpe:2.3:a:gry_project:gry:5.0.6
-
cpe:2.3:a:gry_project:gry:5.0.7
-
cpe:2.3:a:gry_project:gry:5.0.8