A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 is able to address this issue. The patch is named 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218019.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.218019 | Third Party Advisory |
| https://github.com/IonicaBizau/node-gry/commit/5108446c1e23960d65e8b973f1d9486f9f9dbd6c | Patch |
| https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0 | Release Notes |
| https://github.com/IonicaBizau/node-gry/pull/22 | Patch |
| https://vuldb.com/?ctiid.218019 | Third Party Advisory |
Configurations
History
30 Oct 2023, 19:59
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-77 | |
| References | (MISC) https://github.com/IonicaBizau/node-gry/pull/22 - Patch | |
| References | (MISC) https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0 - Release Notes |
20 Oct 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 is able to address this issue. The patch is named 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218019. | |
| CWE |
Information
Published : 2023-01-11 18:15
Updated : 2024-05-17 01:48
NVD link : CVE-2020-36650
Mitre link : CVE-2020-36650
JSON object : View
Products Affected
gry_project
- gry
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')