~ / search / GHSA-94xh-2fmc-xf5j

GHSA-94xh-2fmc-xf5j

systeminformation command injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2020-7752

Packages

EcosystemPackageAffectedFixed in
npm systeminformation < 4.27.11 4.27.11

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact command injection vulnerability ### Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version >= 4.27.11 ### Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite() ### References _Are there any links users can visit to find out more?_ ### For more information If you have any questions or comments about this advisory: * Open an issue in [systeminformation](https://github.com/sebhildebrandt/systeminformation/issues/new?template=bug_report.md)

References

External links from the advisory. They lead to third-party sites.