Vulnerability Details CVE-2020-7789
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.8%
CVSS Severity
CVSS v3 Score 5.6
CVSS v2 Score 6.8
References
- https://github.com/mikaelbr/node-notifier/blob/master/lib/utils.js%23L303
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050371
- https://snyk.io/vuln/SNYK-JS-NODENOTIFIER-1035794
- https://github.com/mikaelbr/node-notifier/blob/master/lib/utils.js%23L303
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050371
- https://snyk.io/vuln/SNYK-JS-NODENOTIFIER-1035794
Products affected by CVE-2020-7789
-
cpe:2.3:a:node-notifier_project:node-notifier:1.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:1.1.0
-
cpe:2.3:a:node-notifier_project:node-notifier:1.1.1
-
cpe:2.3:a:node-notifier_project:node-notifier:1.1.1-1
-
cpe:2.3:a:node-notifier_project:node-notifier:1.1.1-2
-
cpe:2.3:a:node-notifier_project:node-notifier:1.1.2-0
-
cpe:2.3:a:node-notifier_project:node-notifier:1.2.0
-
cpe:2.3:a:node-notifier_project:node-notifier:1.2.1
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.1
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.2
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.3
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.4
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.5
-
cpe:2.3:a:node-notifier_project:node-notifier:2.0.6
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.0-1
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.1
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.2
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.3
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.4
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.5
-
cpe:2.3:a:node-notifier_project:node-notifier:3.0.6
-
cpe:2.3:a:node-notifier_project:node-notifier:3.1.0
-
cpe:2.3:a:node-notifier_project:node-notifier:3.1.1
-
cpe:2.3:a:node-notifier_project:node-notifier:3.1.2
-
cpe:2.3:a:node-notifier_project:node-notifier:3.1.3
-
cpe:2.3:a:node-notifier_project:node-notifier:3.2.0
-
cpe:2.3:a:node-notifier_project:node-notifier:3.2.1
-
cpe:2.3:a:node-notifier_project:node-notifier:3.3.0
-
cpe:2.3:a:node-notifier_project:node-notifier:3.4.0
-
cpe:2.3:a:node-notifier_project:node-notifier:3.4.1
-
cpe:2.3:a:node-notifier_project:node-notifier:4.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.0.1
-
cpe:2.3:a:node-notifier_project:node-notifier:4.0.2
-
cpe:2.3:a:node-notifier_project:node-notifier:4.0.3
-
cpe:2.3:a:node-notifier_project:node-notifier:4.1.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.1.1
-
cpe:2.3:a:node-notifier_project:node-notifier:4.1.2
-
cpe:2.3:a:node-notifier_project:node-notifier:4.2.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.2.1
-
cpe:2.3:a:node-notifier_project:node-notifier:4.2.2
-
cpe:2.3:a:node-notifier_project:node-notifier:4.2.3
-
cpe:2.3:a:node-notifier_project:node-notifier:4.3.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.3.1
-
cpe:2.3:a:node-notifier_project:node-notifier:4.4.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.5.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.6.0
-
cpe:2.3:a:node-notifier_project:node-notifier:4.6.1
-
cpe:2.3:a:node-notifier_project:node-notifier:5.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:5.0.1
-
cpe:2.3:a:node-notifier_project:node-notifier:5.0.2
-
cpe:2.3:a:node-notifier_project:node-notifier:5.1.0
-
cpe:2.3:a:node-notifier_project:node-notifier:5.1.1
-
cpe:2.3:a:node-notifier_project:node-notifier:5.1.2
-
cpe:2.3:a:node-notifier_project:node-notifier:5.2.0
-
cpe:2.3:a:node-notifier_project:node-notifier:5.2.1
-
cpe:2.3:a:node-notifier_project:node-notifier:5.3.0
-
cpe:2.3:a:node-notifier_project:node-notifier:5.4.0
-
cpe:2.3:a:node-notifier_project:node-notifier:5.4.1
-
cpe:2.3:a:node-notifier_project:node-notifier:5.4.2
-
cpe:2.3:a:node-notifier_project:node-notifier:5.4.3
-
cpe:2.3:a:node-notifier_project:node-notifier:6.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:7.0.0
-
cpe:2.3:a:node-notifier_project:node-notifier:7.0.1
-
cpe:2.3:a:node-notifier_project:node-notifier:7.0.2
-
cpe:2.3:a:node-notifier_project:node-notifier:8.0.0