PT-2020-19671

CVE-2020-7635

Published

2020-04-06

Updated

2021-12-09

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions compass-compile version 0.0.1

Description The issue allows execution of arbitrary commands via the options argument, which is a command injection flaw.

Recommendations For version 0.0.1, consider disabling the options argument until a patch is available to prevent command injection attacks.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-7Q9F-X6RM-QMXR

SNYK-JS-COMPASSCOMPILE-564429

Found an issue in the description? Have something to add? Feel free to write us 👾