Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-7629
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.012
EPSS Ranking
78.3%
CVSS Severity
CVSS v3 Score
9.8
CVSS v2 Score
7.5
References
https://github.com/1000ch/install-package/blob/master/index.js#L82%2C
https://snyk.io/vuln/SNYK-JS-INSTALLPACKAGE-564267
https://github.com/1000ch/install-package/blob/master/index.js#L82%2C
https://snyk.io/vuln/SNYK-JS-INSTALLPACKAGE-564267
Products affected by CVE-2020-7629
Install-Package Project
»
Install-Package
»
Version:
N/A
cpe:2.3:a:install-package_project:install-package:-
Install-Package Project
»
Install-Package
»
Version:
0.1.0
cpe:2.3:a:install-package_project:install-package:0.1.0
Install-Package Project
»
Install-Package
»
Version:
0.2.0
cpe:2.3:a:install-package_project:install-package:0.2.0
Install-Package Project
»
Install-Package
»
Version:
0.3.0
cpe:2.3:a:install-package_project:install-package:0.3.0
Install-Package Project
»
Install-Package
»
Version:
0.4.0
cpe:2.3:a:install-package_project:install-package:0.4.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved