admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-31 10:40:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-29080.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

714 B
Raw Blame History

CVE-2022-29080

Description

The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions with a JSON object in which pkgs is a key, and there are shell metacharacters in a value.

POC

Reference

Github

No PoCs found on GitHub currently.