~ / search / GHSA-v8v8-6859-qxm4

GHSA-v8v8-6859-qxm4

Arbitrary shell command execution in logkitty

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-8149

Packages

EcosystemPackageAffectedFixed in
npm logkitty < 0.7.1 0.7.1

Details

As written in the advisory (Markdown source, shown as plain text).

Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.

References

External links from the advisory. They lead to third-party sites.