CVEDB API

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 79.1%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-7628

Install-Package Project » Install-Package » Version: N/A

cpe:2.3:a:install-package_project:install-package:-
Umount Project » Umount » Version: 1.0.0

cpe:2.3:a:umount_project:umount:1.0.0
Umount Project » Umount » Version: 1.0.1

cpe:2.3:a:umount_project:umount:1.0.1
Umount Project » Umount » Version: 1.1.0

cpe:2.3:a:umount_project:umount:1.1.0
Umount Project » Umount » Version: 1.1.1

cpe:2.3:a:umount_project:umount:1.1.1
Umount Project » Umount » Version: 1.1.2

cpe:2.3:a:umount_project:umount:1.1.2
Umount Project » Umount » Version: 1.1.3

cpe:2.3:a:umount_project:umount:1.1.3
Umount Project » Umount » Version: 1.1.4

cpe:2.3:a:umount_project:umount:1.1.4
Umount Project » Umount » Version: 1.1.5

cpe:2.3:a:umount_project:umount:1.1.5
Umount Project » Umount » Version: 1.1.6

cpe:2.3:a:umount_project:umount:1.1.6