CVEDB API

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 77.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-7628

Install-Package Project » Install-Package » Version: N/A

cpe:2.3:a:install-package_project:install-package:-
Umount Project » Umount » Version: 1.0.0

cpe:2.3:a:umount_project:umount:1.0.0
Umount Project » Umount » Version: 1.0.1

cpe:2.3:a:umount_project:umount:1.0.1
Umount Project » Umount » Version: 1.1.0

cpe:2.3:a:umount_project:umount:1.1.0
Umount Project » Umount » Version: 1.1.1

cpe:2.3:a:umount_project:umount:1.1.1
Umount Project » Umount » Version: 1.1.2

cpe:2.3:a:umount_project:umount:1.1.2
Umount Project » Umount » Version: 1.1.3

cpe:2.3:a:umount_project:umount:1.1.3
Umount Project » Umount » Version: 1.1.4

cpe:2.3:a:umount_project:umount:1.1.4
Umount Project » Umount » Version: 1.1.5

cpe:2.3:a:umount_project:umount:1.1.5
Umount Project » Umount » Version: 1.1.6

cpe:2.3:a:umount_project:umount:1.1.6